stealc | 1cf28651acc00462ff4e07a87bf64e12a37a72290100cf4cf8f082e785e8825b | Triage

Sharing

General

Target

2216-910-0x0000000000DA0000-0x00000000014A0000-memory.dmp
Size

7.0MB
Sample

241107-15cxrsymgw
MD5

7c9de3e408854f624563b4d16389f449
SHA1

82ce42d471f771358355ff6e175f4918cbc1d81d
SHA256

1cf28651acc00462ff4e07a87bf64e12a37a72290100cf4cf8f082e785e8825b
SHA512

06f22d108c53dcfe9d0fcdfd45eeef97bc9e31265e1712d0fbf044f5ca745946e3b0d7c8e27bf17ddd866fe3f9a52e95f9632002b457f826c882f261fc549753
SSDEEP

98304:ZYGJtF4RIwybJjsbuR/hiV9d5dsSrZtzE3xn6y8/3W8w2v:uGh6yb+5ySrTzl3W0v

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  2216-910-0x0000000000DA0000-0x00000000014A0000-memory.dmp
- Size
  
  7.0MB
- MD5
  
  7c9de3e408854f624563b4d16389f449
- SHA1
  
  82ce42d471f771358355ff6e175f4918cbc1d81d
- SHA256
  
  1cf28651acc00462ff4e07a87bf64e12a37a72290100cf4cf8f082e785e8825b
- SHA512
  
  06f22d108c53dcfe9d0fcdfd45eeef97bc9e31265e1712d0fbf044f5ca745946e3b0d7c8e27bf17ddd866fe3f9a52e95f9632002b457f826c882f261fc549753
- SSDEEP
  
  98304:ZYGJtF4RIwybJjsbuR/hiV9d5dsSrZtzE3xn6y8/3W8w2v:uGh6yb+5ySrTzl3W0v
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer