stealc | 8c270a419ed3811006ed11777989a427e385d6e9e1108b41b59e67b9d0dc07cf | Triage

Sharing

General

Target

3036-73-0x0000000000090000-0x0000000000790000-memory.dmp
Size

7.0MB
Sample

241107-19hc2szblj
MD5

b04acacb102fa14152d414b192a0eafd
SHA1

d40ddfd81e48eaf98fd606b2fa024efdb88b6c4d
SHA256

8c270a419ed3811006ed11777989a427e385d6e9e1108b41b59e67b9d0dc07cf
SHA512

121749747b0aba5db6aed6a82df034b90f49dc390adfb95c2a6827d274ee2439d329a5fe297c4d2113bf6ffbe95751f84f16aa78c65c4e662db39d7bdaa8df1f
SSDEEP

98304:NQGJtF4RIwyblCsbuR/hiV9HktWbxxYEzE3xn6y8/3W8w2v:uGh6ybTk0bxxDzl3W0v

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  3036-73-0x0000000000090000-0x0000000000790000-memory.dmp
- Size
  
  7.0MB
- MD5
  
  b04acacb102fa14152d414b192a0eafd
- SHA1
  
  d40ddfd81e48eaf98fd606b2fa024efdb88b6c4d
- SHA256
  
  8c270a419ed3811006ed11777989a427e385d6e9e1108b41b59e67b9d0dc07cf
- SHA512
  
  121749747b0aba5db6aed6a82df034b90f49dc390adfb95c2a6827d274ee2439d329a5fe297c4d2113bf6ffbe95751f84f16aa78c65c4e662db39d7bdaa8df1f
- SSDEEP
  
  98304:NQGJtF4RIwyblCsbuR/hiV9HktWbxxYEzE3xn6y8/3W8w2v:uGh6ybTk0bxxDzl3W0v
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer