stealc | d8891221b19e934c2bc011332e799220b2c1f427c30df233bd9cd8cf4da51632 | Triage

Sharing

General

Target

3048-3-0x0000000000A20000-0x000000000114A000-memory.dmp
Size

7.2MB
Sample

241106-2aadtsyhka
MD5

e9808069aa8b3aa032940f9a05256f64
SHA1

d2fe5a6407aad0a648dcacbdcdf346af47c975f3
SHA256

d8891221b19e934c2bc011332e799220b2c1f427c30df233bd9cd8cf4da51632
SHA512

1b6601ee6e05f8d0e709db01f5e24abf047462608f42e059bb1d1935dfb8f323e91828db5000d4f20aa08cc84988016cb9f825c802fada7996e4cc477ba1a92c
SSDEEP

98304:SnGJtF4RIwybWVRZfMdhM8ZRq66EFEqArDXYZSPy19o1W:0Gh6ybUl66EFEqA/RPy14

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  3048-3-0x0000000000A20000-0x000000000114A000-memory.dmp
- Size
  
  7.2MB
- MD5
  
  e9808069aa8b3aa032940f9a05256f64
- SHA1
  
  d2fe5a6407aad0a648dcacbdcdf346af47c975f3
- SHA256
  
  d8891221b19e934c2bc011332e799220b2c1f427c30df233bd9cd8cf4da51632
- SHA512
  
  1b6601ee6e05f8d0e709db01f5e24abf047462608f42e059bb1d1935dfb8f323e91828db5000d4f20aa08cc84988016cb9f825c802fada7996e4cc477ba1a92c
- SSDEEP
  
  98304:SnGJtF4RIwybWVRZfMdhM8ZRq66EFEqArDXYZSPy19o1W:0Gh6ybUl66EFEqA/RPy14
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer