stealc | 41f8615853c3644813ff1dca57ef640c6df3acc97f4198da29420e28970da5ea | Triage

Sharing

General

Target

1156-3-0x00000000013B0000-0x0000000001A5A000-memory.dmp
Size

6.7MB
Sample

241123-19pgcszkb1
MD5

c1b7134b4bd6161d4bc0e5317c536e02
SHA1

b8fee71ae270c3325d18d100cfba168f9033a627
SHA256

41f8615853c3644813ff1dca57ef640c6df3acc97f4198da29420e28970da5ea
SHA512

6367ed60373e8372194a095baa9a5708a4bda835cd49973945783c123aba1d571f3c40565f38ba87b5adf5c9ae2dd2564d9748c7129ebdddeafca5c5a2efd03a
SSDEEP

98304:2y1LZTcmTtZIlwT7jiAo48svKfPiB6GX:RZxfPiAncPW

Score

10^/10

stealc mars discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1156-3-0x00000000013B0000-0x0000000001A5A000-memory.dmp
- Size
  
  6.7MB
- MD5
  
  c1b7134b4bd6161d4bc0e5317c536e02
- SHA1
  
  b8fee71ae270c3325d18d100cfba168f9033a627
- SHA256
  
  41f8615853c3644813ff1dca57ef640c6df3acc97f4198da29420e28970da5ea
- SHA512
  
  6367ed60373e8372194a095baa9a5708a4bda835cd49973945783c123aba1d571f3c40565f38ba87b5adf5c9ae2dd2564d9748c7129ebdddeafca5c5a2efd03a
- SSDEEP
  
  98304:2y1LZTcmTtZIlwT7jiAo48svKfPiB6GX:RZxfPiAncPW
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer