stealc | dfb347ea6878536aa9952630601bce6e995684e10e405c58004213a411af00dd | Triage

Sharing

General

Target

3068-296-0x0000000000E10000-0x00000000014A7000-memory.dmp
Size

6.6MB
Sample

241120-n8pdrawpfv
MD5

92c147d8c22d1015380e4794439a7a17
SHA1

f3205821080821f66d4fb10cc3c1851cf09ab965
SHA256

dfb347ea6878536aa9952630601bce6e995684e10e405c58004213a411af00dd
SHA512

7f6aa37d2f1a2efa4553867186da0ebc67fcf15934b12f2bb986bd9976af798f5ee97423b0dd1d7997f07e2f070a94ef90d23cf610e6343184755fb05f9355ed
SSDEEP

98304:dxrraMa0ywj3mdr3ojqZL0edTPWnjiyaAeOKRdEGETy:/+1lOnGyaAeOKnx

Score

10^/10

stealc mars discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  3068-296-0x0000000000E10000-0x00000000014A7000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  92c147d8c22d1015380e4794439a7a17
- SHA1
  
  f3205821080821f66d4fb10cc3c1851cf09ab965
- SHA256
  
  dfb347ea6878536aa9952630601bce6e995684e10e405c58004213a411af00dd
- SHA512
  
  7f6aa37d2f1a2efa4553867186da0ebc67fcf15934b12f2bb986bd9976af798f5ee97423b0dd1d7997f07e2f070a94ef90d23cf610e6343184755fb05f9355ed
- SSDEEP
  
  98304:dxrraMa0ywj3mdr3ojqZL0edTPWnjiyaAeOKRdEGETy:/+1lOnGyaAeOKnx
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer