stealc | 388ccb6253753497a1a8fad2bfd7ac569802e4fb881a38a5bd6ec2151b8d12b3 | Triage

Sharing

General

Target

1532-63-0x00000000004A0000-0x0000000000B2D000-memory.dmp
Size

6.6MB
Sample

241125-pzp5cstmep
MD5

2c3e5efb80ec1a496e4d2ea9364a8b74
SHA1

3d6b21d4849a94faa60247a469a81387f2dd4ab0
SHA256

388ccb6253753497a1a8fad2bfd7ac569802e4fb881a38a5bd6ec2151b8d12b3
SHA512

ae382a9582baf5d73f0c8a711f775fbed57ce66a408251bb47c5840faf9a2a4fe84a1f6c3a28c086ea6a0c67bee4da5297f71f54abbbcc17965c58768a5a9b9f
SSDEEP

98304:drnI5KUZjDQnrbHEh/CTfdQORpB4GEkioRCrZInBAID7BJUME84M8:K0BXRTfmC9EWsZ2WCBJU24V

Score

10^/10

stealc mars discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1532-63-0x00000000004A0000-0x0000000000B2D000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  2c3e5efb80ec1a496e4d2ea9364a8b74
- SHA1
  
  3d6b21d4849a94faa60247a469a81387f2dd4ab0
- SHA256
  
  388ccb6253753497a1a8fad2bfd7ac569802e4fb881a38a5bd6ec2151b8d12b3
- SHA512
  
  ae382a9582baf5d73f0c8a711f775fbed57ce66a408251bb47c5840faf9a2a4fe84a1f6c3a28c086ea6a0c67bee4da5297f71f54abbbcc17965c58768a5a9b9f
- SSDEEP
  
  98304:drnI5KUZjDQnrbHEh/CTfdQORpB4GEkioRCrZInBAID7BJUME84M8:K0BXRTfmC9EWsZ2WCBJU24V
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer