stealc | 5a0cc16ea08cd5579c5cea3cb28c88fd27681465f290ee685006fcac4cd8f9b1 | Triage

Sharing

General

Target

4432-63-0x00000000002D0000-0x0000000000A0A000-memory.dmp
Size

7.2MB
Sample

241106-gc1ctavkbz
MD5

b0cacf41e4dc91271abcb05ff68e51b6
SHA1

7b1385741b401427984fcf8ade7dfa7cfa3ea3f5
SHA256

5a0cc16ea08cd5579c5cea3cb28c88fd27681465f290ee685006fcac4cd8f9b1
SHA512

bf1bf2f782accb18abaf00d0353bc95825f35286f15d189100c12bf2da1db62e39b8983a6628f8d3270410a06152fc5b7b521facafb7238d7b584539ccd41e89
SSDEEP

98304:3vGJtF4RIwybW96dv38H3KUNylK1PzWhMKmCi80e3:/Gh6ybW7LrWhBma0

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  4432-63-0x00000000002D0000-0x0000000000A0A000-memory.dmp
- Size
  
  7.2MB
- MD5
  
  b0cacf41e4dc91271abcb05ff68e51b6
- SHA1
  
  7b1385741b401427984fcf8ade7dfa7cfa3ea3f5
- SHA256
  
  5a0cc16ea08cd5579c5cea3cb28c88fd27681465f290ee685006fcac4cd8f9b1
- SHA512
  
  bf1bf2f782accb18abaf00d0353bc95825f35286f15d189100c12bf2da1db62e39b8983a6628f8d3270410a06152fc5b7b521facafb7238d7b584539ccd41e89
- SSDEEP
  
  98304:3vGJtF4RIwybW96dv38H3KUNylK1PzWhMKmCi80e3:/Gh6ybW7LrWhBma0
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer