stealc | f3dd672954911458b94bbd390607bd10272a12798e2196f6e0f0b169e3cf18f6 | Triage

Sharing

General

Target

1676-926-0x0000000000130000-0x0000000000857000-memory.dmp
Size

7.2MB
Sample

241106-sgknpsshmp
MD5

bef56cf3be27b6ecf3bbfc4a99a3ce1d
SHA1

e9b23bd1e174c9788b3ab2b3cbd6cbd279318831
SHA256

f3dd672954911458b94bbd390607bd10272a12798e2196f6e0f0b169e3cf18f6
SHA512

4696098ec7c3c70a651c12e863c62ea002ac9f2caa5615694e6a0070a8a6072a18fa6cccf16718dcc8f43770b0ff10e696f7591a2e9fbdaad25f5ba112a944b7
SSDEEP

98304:dtGJtF4RIwybqge7gSN9odps+oqS041zL1gegil2GHaMa24z5CI:rGh6ybggeKstqS0sLMifaLz5CI

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  1676-926-0x0000000000130000-0x0000000000857000-memory.dmp
- Size
  
  7.2MB
- MD5
  
  bef56cf3be27b6ecf3bbfc4a99a3ce1d
- SHA1
  
  e9b23bd1e174c9788b3ab2b3cbd6cbd279318831
- SHA256
  
  f3dd672954911458b94bbd390607bd10272a12798e2196f6e0f0b169e3cf18f6
- SHA512
  
  4696098ec7c3c70a651c12e863c62ea002ac9f2caa5615694e6a0070a8a6072a18fa6cccf16718dcc8f43770b0ff10e696f7591a2e9fbdaad25f5ba112a944b7
- SSDEEP
  
  98304:dtGJtF4RIwybqge7gSN9odps+oqS041zL1gegil2GHaMa24z5CI:rGh6ybggeKstqS0sLMifaLz5CI
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer