stealc | f96e4bc8d32e9680fe214308ce2eef9554743b5cb28771e4453ef2bef5d1a7d8 | Triage

Sharing

General

Target

3588-27-0x0000000000C60000-0x0000000001364000-memory.dmp
Size

7.0MB
Sample

241105-zqyegsygrr
MD5

645adea58a8b558a5ef0504742c974fc
SHA1

f9efc5eea1fabf1b073651afe146bc499b44c39d
SHA256

f96e4bc8d32e9680fe214308ce2eef9554743b5cb28771e4453ef2bef5d1a7d8
SHA512

4529b4019d6875189cee7ed70b5e694326276d387a0ec9d07ca36b7b0afeb1f78eb217213530fc9778173a5ed150a999b410d0862918c9815e6bce724853bb98
SSDEEP

98304:h8GJtF4RIwybIWhUHpH8NpG4be9ZmSR3CXWr9Rl0wgnHq9DTNVN3:uGh6ybIFC0oS3bRl8nKvb

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  3588-27-0x0000000000C60000-0x0000000001364000-memory.dmp
- Size
  
  7.0MB
- MD5
  
  645adea58a8b558a5ef0504742c974fc
- SHA1
  
  f9efc5eea1fabf1b073651afe146bc499b44c39d
- SHA256
  
  f96e4bc8d32e9680fe214308ce2eef9554743b5cb28771e4453ef2bef5d1a7d8
- SHA512
  
  4529b4019d6875189cee7ed70b5e694326276d387a0ec9d07ca36b7b0afeb1f78eb217213530fc9778173a5ed150a999b410d0862918c9815e6bce724853bb98
- SSDEEP
  
  98304:h8GJtF4RIwybIWhUHpH8NpG4be9ZmSR3CXWr9Rl0wgnHq9DTNVN3:uGh6ybIFC0oS3bRl8nKvb
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer