stealc | 374cc296916f395a0f7d1a1e937b9cc09876c804982e678318ad78becea25e72 | Triage

Sharing

General

Target

1900-114-0x0000000000270000-0x00000000008FF000-memory.dmp
Size

6.6MB
Sample

241124-22nerszrdj
MD5

274435b224c620264777b13b62838318
SHA1

94bb0e15aec615b3fdcc5833b4c42ff36bbf11bc
SHA256

374cc296916f395a0f7d1a1e937b9cc09876c804982e678318ad78becea25e72
SHA512

78ddb029dc069cf57518a14b0404444b347f7e124b692cc4b46d582246f5c1adcf8be0fd8fe97ffc09a2280ddf9522e19e2c524d0270c65b41860895947c502d
SSDEEP

98304:qj7Qehcaao5g5jus1/3WEQj3840rQ2BiM3aZdryo:Z2AWRB0ZF3N

Score

10^/10

stealc mars discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1900-114-0x0000000000270000-0x00000000008FF000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  274435b224c620264777b13b62838318
- SHA1
  
  94bb0e15aec615b3fdcc5833b4c42ff36bbf11bc
- SHA256
  
  374cc296916f395a0f7d1a1e937b9cc09876c804982e678318ad78becea25e72
- SHA512
  
  78ddb029dc069cf57518a14b0404444b347f7e124b692cc4b46d582246f5c1adcf8be0fd8fe97ffc09a2280ddf9522e19e2c524d0270c65b41860895947c502d
- SSDEEP
  
  98304:qj7Qehcaao5g5jus1/3WEQj3840rQ2BiM3aZdryo:Z2AWRB0ZF3N
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer