stealc | a28ef148b70259be405cefff1e7f504cd5fd5d911ad157e214051673a159fda0 | Triage

Sharing

General

Target

2536-3-0x00000000012F0000-0x000000000198A000-memory.dmp
Size

6.6MB
Sample

241119-zb88faxjgj
MD5

9934b42ceccd1c2de5b4978ac4e7407b
SHA1

ee559e3e553773f353c72a4b11527c5a6c081670
SHA256

a28ef148b70259be405cefff1e7f504cd5fd5d911ad157e214051673a159fda0
SHA512

60ef32842ac8fb5785bff314ec3a47a8c75be0122dfdb60ec3cfcaf4497df6d2cf76945ba4967d00d00f5e44ee8ebf669ce73c36f4534fae5543c64d1469dfe0
SSDEEP

98304:oLlIrss9YE/YOUbV6MvaJVxlEHbpCYegJvOGkbKloF:l2aJlEHVv11KbKlo

Score

10^/10

stealc mars discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2536-3-0x00000000012F0000-0x000000000198A000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  9934b42ceccd1c2de5b4978ac4e7407b
- SHA1
  
  ee559e3e553773f353c72a4b11527c5a6c081670
- SHA256
  
  a28ef148b70259be405cefff1e7f504cd5fd5d911ad157e214051673a159fda0
- SHA512
  
  60ef32842ac8fb5785bff314ec3a47a8c75be0122dfdb60ec3cfcaf4497df6d2cf76945ba4967d00d00f5e44ee8ebf669ce73c36f4534fae5543c64d1469dfe0
- SSDEEP
  
  98304:oLlIrss9YE/YOUbV6MvaJVxlEHbpCYegJvOGkbKloF:l2aJlEHVv11KbKlo
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer