stealc | ddfa60aec22e7d496324c323d609f26cc5162279784f2472e2017d4ba5bd218f | Triage

Sharing

General

Target

876-78-0x0000000000F90000-0x0000000001636000-memory.dmp
Size

6.6MB
Sample

241120-j5zyvsvcpl
MD5

07918f632105484fcab5db6a3f160d40
SHA1

fa1a0ebbee9878ded239648450474822a47ba402
SHA256

ddfa60aec22e7d496324c323d609f26cc5162279784f2472e2017d4ba5bd218f
SHA512

f88c6f0b1fe3d398c3eed58c8e62d63b9548145fe369f836dd4b4698b201203e231813911b30e438591bb6e71065ea555e90ae95a4e414904469e800951e0b2c
SSDEEP

98304:y57wjyB4aZ+YWEXXmzt4r2/Y5ce0Tk+QL:njhOXUtHY5ctv2

Score

10^/10

stealc mars discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  876-78-0x0000000000F90000-0x0000000001636000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  07918f632105484fcab5db6a3f160d40
- SHA1
  
  fa1a0ebbee9878ded239648450474822a47ba402
- SHA256
  
  ddfa60aec22e7d496324c323d609f26cc5162279784f2472e2017d4ba5bd218f
- SHA512
  
  f88c6f0b1fe3d398c3eed58c8e62d63b9548145fe369f836dd4b4698b201203e231813911b30e438591bb6e71065ea555e90ae95a4e414904469e800951e0b2c
- SSDEEP
  
  98304:y57wjyB4aZ+YWEXXmzt4r2/Y5ce0Tk+QL:njhOXUtHY5ctv2
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer