stealc | 1fa52632af234027c7735f9b571a6df781b6d1ee753e605bc40480ef20ce704e | Triage

Sharing

General

Target

4032-63-0x00000000002F0000-0x0000000000A41000-memory.dmp
Size

7.3MB
Sample

241107-cacrhs1qcy
MD5

450edf50c187b7b19ce74ae1ee25d08e
SHA1

71bc8aa9a276af45795f40708bca1561e06dc6ff
SHA256

1fa52632af234027c7735f9b571a6df781b6d1ee753e605bc40480ef20ce704e
SHA512

adf0cb5889bb68ca1e804c4e927ae0c920cde9f0c45712e3bf91082d697bb4cbde75888c1036628d13330764588306e7feed8a71fdde3e173f1fed4c5aabbee8
SSDEEP

98304:CVvGJtF4RIwybKOHfJxYGqV5Pp7fhONuP+sxDArhPqB4ESy:CBGh6yb1YHVHfz+sZArhPq3Sy

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  4032-63-0x00000000002F0000-0x0000000000A41000-memory.dmp
- Size
  
  7.3MB
- MD5
  
  450edf50c187b7b19ce74ae1ee25d08e
- SHA1
  
  71bc8aa9a276af45795f40708bca1561e06dc6ff
- SHA256
  
  1fa52632af234027c7735f9b571a6df781b6d1ee753e605bc40480ef20ce704e
- SHA512
  
  adf0cb5889bb68ca1e804c4e927ae0c920cde9f0c45712e3bf91082d697bb4cbde75888c1036628d13330764588306e7feed8a71fdde3e173f1fed4c5aabbee8
- SSDEEP
  
  98304:CVvGJtF4RIwybKOHfJxYGqV5Pp7fhONuP+sxDArhPqB4ESy:CBGh6yb1YHVHfz+sZArhPq3Sy
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer