stealc | 65ae23376b2d1179fac3bb74e5d5258f0aa1d06ef0726544c9bddadc58d11b80 | Triage

Sharing

General

Target

40163eae38af01040691454b24b06e2f.exe
Size

239KB
Sample

241120-hj7k5ssrfy
MD5

40163eae38af01040691454b24b06e2f
SHA1

53eca8666143b17066b0c84d7087c570f6c18d57
SHA256

65ae23376b2d1179fac3bb74e5d5258f0aa1d06ef0726544c9bddadc58d11b80
SHA512

008a1755311b2efb1ae843a69dc0b20376b3fc8e989fd6d9e6f49612d7cc6b5b0dc26434a3f508d74b116b2d6c4e383a97a84686b74bd4d5436bfb297a23f86e
SSDEEP

3072:vmrsDjKoXngR6sJvWN3pEOsJkMRuki7ZDzUWXPj857J08:O4DueZsFX15IN1Dz5PjEtz

Score

10^/10

stealc default11 discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

default11

C2

http://62.204.41.163

Attributes

url_path
/16fa04073490929d.php

Targets

- Target
  
  40163eae38af01040691454b24b06e2f.exe
- Size
  
  239KB
- MD5
  
  40163eae38af01040691454b24b06e2f
- SHA1
  
  53eca8666143b17066b0c84d7087c570f6c18d57
- SHA256
  
  65ae23376b2d1179fac3bb74e5d5258f0aa1d06ef0726544c9bddadc58d11b80
- SHA512
  
  008a1755311b2efb1ae843a69dc0b20376b3fc8e989fd6d9e6f49612d7cc6b5b0dc26434a3f508d74b116b2d6c4e383a97a84686b74bd4d5436bfb297a23f86e
- SSDEEP
  
  3072:vmrsDjKoXngR6sJvWN3pEOsJkMRuki7ZDzUWXPj857J08:O4DueZsFX15IN1Dz5PjEtz
Score

10^/10

stealc default11 discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

default11stealc

behavioral1

stealcdefault11discoverystealer

behavioral2

stealcdefault11discoverystealer