stealc | 480f6c3bd803c0f50b237f3a806d8a36982a20c8eb667384e9d39c25c9bb86f8 | Triage

Sharing

General

Target

1032-25-0x0000000000380000-0x0000000000AC4000-memory.dmp
Size

7.3MB
Sample

241104-zcwnqsyrgp
MD5

69fa0aee32ba9bf31a8a37c92676d620
SHA1

0694e5987a02a1a9b726964a80a2b2a1d394de8a
SHA256

480f6c3bd803c0f50b237f3a806d8a36982a20c8eb667384e9d39c25c9bb86f8
SHA512

65638c823cd5266077a73029341d5126047b8d2a56ee45d52a64896086823d5569eb00acac8512d43ad22855f821438126da4119a356b99799b7425ac1bf87f4
SSDEEP

98304:w6GJtF4RIwybUCxLByT+YGxbMcfSeH1VcA4d1PYAPVy:rGh6ybRgc6eUjPYmy

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  1032-25-0x0000000000380000-0x0000000000AC4000-memory.dmp
- Size
  
  7.3MB
- MD5
  
  69fa0aee32ba9bf31a8a37c92676d620
- SHA1
  
  0694e5987a02a1a9b726964a80a2b2a1d394de8a
- SHA256
  
  480f6c3bd803c0f50b237f3a806d8a36982a20c8eb667384e9d39c25c9bb86f8
- SHA512
  
  65638c823cd5266077a73029341d5126047b8d2a56ee45d52a64896086823d5569eb00acac8512d43ad22855f821438126da4119a356b99799b7425ac1bf87f4
- SSDEEP
  
  98304:w6GJtF4RIwybUCxLByT+YGxbMcfSeH1VcA4d1PYAPVy:rGh6ybRgc6eUjPYmy
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer