stealc | 37200edb2f3bd27c123645a62c3ca930f7ee0d7e9985f1e6aab25fcddee8a5f1 | Triage

Sharing

General

Target

2480-151-0x00000000011C0000-0x0000000001842000-memory.dmp
Size

6.5MB
Sample

241121-sw8dbatell
MD5

6450f4d0fba8b71ba4f7f38cdd905957
SHA1

a252bb45f5688615e9b9e22766a108328cf3b8c0
SHA256

37200edb2f3bd27c123645a62c3ca930f7ee0d7e9985f1e6aab25fcddee8a5f1
SHA512

0894bf0e72f148e5752e84695da19cb23c42032ab2d36f5a737d4300817ab108cf77facf4948f6742295a6310bd0276c0c785495bddaf7deb1053c5eefe15bdb
SSDEEP

98304:ZqdI1bvCDGKrD1OjRRkmAXNMUim1TPRQzN6ePE:p1Dk3XJjq

Score

10^/10

stealc mars discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2480-151-0x00000000011C0000-0x0000000001842000-memory.dmp
- Size
  
  6.5MB
- MD5
  
  6450f4d0fba8b71ba4f7f38cdd905957
- SHA1
  
  a252bb45f5688615e9b9e22766a108328cf3b8c0
- SHA256
  
  37200edb2f3bd27c123645a62c3ca930f7ee0d7e9985f1e6aab25fcddee8a5f1
- SHA512
  
  0894bf0e72f148e5752e84695da19cb23c42032ab2d36f5a737d4300817ab108cf77facf4948f6742295a6310bd0276c0c785495bddaf7deb1053c5eefe15bdb
- SSDEEP
  
  98304:ZqdI1bvCDGKrD1OjRRkmAXNMUim1TPRQzN6ePE:p1Dk3XJjq
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer