stealc | 4d9a4f12236c9e0a88dc4496468317d0884b24b9db80ed116dbb162a705b7596 | Triage

Sharing

General

Target

2408-3-0x0000000000C60000-0x00000000012FD000-memory.dmp
Size

6.6MB
Sample

241122-t15zeszngm
MD5

4483066d85732b0840f097f0cab61fa5
SHA1

bbd4547de1ca0fd1c8148b818a76429513fec048
SHA256

4d9a4f12236c9e0a88dc4496468317d0884b24b9db80ed116dbb162a705b7596
SHA512

e843feb0225bba0a07d66317b4bae4086a896a0d4fe3d1f63a797ec12f76a58d0705f5b8de05376d744ce220f5a9f1483b87a91156c9709183e15dcb59b5d727
SSDEEP

98304:JQ33G9cFW1kCLhN1eMsTAiEC+hKvvcWu3bIsO:6BJRvjvJu3Ms

Score

10^/10

stealc mars discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2408-3-0x0000000000C60000-0x00000000012FD000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  4483066d85732b0840f097f0cab61fa5
- SHA1
  
  bbd4547de1ca0fd1c8148b818a76429513fec048
- SHA256
  
  4d9a4f12236c9e0a88dc4496468317d0884b24b9db80ed116dbb162a705b7596
- SHA512
  
  e843feb0225bba0a07d66317b4bae4086a896a0d4fe3d1f63a797ec12f76a58d0705f5b8de05376d744ce220f5a9f1483b87a91156c9709183e15dcb59b5d727
- SSDEEP
  
  98304:JQ33G9cFW1kCLhN1eMsTAiEC+hKvvcWu3bIsO:6BJRvjvJu3Ms
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer