stealc | 0b49763d43a4c4a1d407384369ca05a43023d0a7fe0a8176637492a913fa59e1 | Triage

Sharing

General

Target

2528-3-0x00000000009A0000-0x0000000001020000-memory.dmp
Size

6.5MB
Sample

241125-g1kx2aynhm
MD5

83346ea5d8c157ec724b5b2a49774d41
SHA1

5457117e5b18ebec2e2bf91e10d5e9af865898a4
SHA256

0b49763d43a4c4a1d407384369ca05a43023d0a7fe0a8176637492a913fa59e1
SHA512

db3529cd1aee7549798cbf0de7b6d175b95a243b84d08a0a128266738dd1436007b950b7dd74995fdd1735ab14531f4c40c2901124901c2afe1f7c543dfbb33b
SSDEEP

98304:rIH9SuLhtMVHPmwRJ6q8Ge87f3man9aYoEMljalem:GsG5GvzitE9

Score

10^/10

stealc mars discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2528-3-0x00000000009A0000-0x0000000001020000-memory.dmp
- Size
  
  6.5MB
- MD5
  
  83346ea5d8c157ec724b5b2a49774d41
- SHA1
  
  5457117e5b18ebec2e2bf91e10d5e9af865898a4
- SHA256
  
  0b49763d43a4c4a1d407384369ca05a43023d0a7fe0a8176637492a913fa59e1
- SHA512
  
  db3529cd1aee7549798cbf0de7b6d175b95a243b84d08a0a128266738dd1436007b950b7dd74995fdd1735ab14531f4c40c2901124901c2afe1f7c543dfbb33b
- SSDEEP
  
  98304:rIH9SuLhtMVHPmwRJ6q8Ge87f3man9aYoEMljalem:GsG5GvzitE9
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer