stealc | b8cac83d613f034eb83403825f331380caf9fd318be24c616f27df37548e6c86 | Triage

Sharing

General

Target

2772-3-0x00000000003B0000-0x0000000000A34000-memory.dmp
Size

6.5MB
Sample

241122-xfyamaskcl
MD5

28629fb72c4c1387d4b5969d31f37c8a
SHA1

ccf8d636d70dd3876b16180a0b487c7c6e1ca1c8
SHA256

b8cac83d613f034eb83403825f331380caf9fd318be24c616f27df37548e6c86
SHA512

cba36ca6809de2f2c65e34bf2a51cabb53535898b7de329e9aa3faa65d4301102e5d6db00209026cb33d5dd3d1212f50633299e8d18699e7074eed5210dcae70
SSDEEP

98304:/qDIZfJ9Rbq0cjQVLd52PLkMoOtE8IWMiikSjhfsenieh:xLLEkfO2RiQd

Score

10^/10

stealc mars discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2772-3-0x00000000003B0000-0x0000000000A34000-memory.dmp
- Size
  
  6.5MB
- MD5
  
  28629fb72c4c1387d4b5969d31f37c8a
- SHA1
  
  ccf8d636d70dd3876b16180a0b487c7c6e1ca1c8
- SHA256
  
  b8cac83d613f034eb83403825f331380caf9fd318be24c616f27df37548e6c86
- SHA512
  
  cba36ca6809de2f2c65e34bf2a51cabb53535898b7de329e9aa3faa65d4301102e5d6db00209026cb33d5dd3d1212f50633299e8d18699e7074eed5210dcae70
- SSDEEP
  
  98304:/qDIZfJ9Rbq0cjQVLd52PLkMoOtE8IWMiikSjhfsenieh:xLLEkfO2RiQd
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer