stealc | 019aa6b9c8f7dbd874eb4fa3311d7281c5b746fbb62e8fd22f50e579bf8e3acd | Triage

Sharing

General

Target

1644-167-0x0000000000EF0000-0x0000000001590000-memory.dmp
Size

6.6MB
Sample

241210-s8wkaayrct
MD5

4cf874c0198e4d755aae8cad258da3da
SHA1

355a020239875c9bf5c4322b2f6874f1b331ef24
SHA256

019aa6b9c8f7dbd874eb4fa3311d7281c5b746fbb62e8fd22f50e579bf8e3acd
SHA512

24e17a2c4e7631db3d39a3c97d7c040ca0d4fc777563374b09b694422f67d817b9e459bd5c2a79dc8b6fcbb9e4c9f9af777ea85f831be659f6968dc808bc726d
SSDEEP

98304:5UYD7xmFf7eUIqUhjG1siGNq4PoUP6bN:5If7eUIqOjG1rGNq5UPW

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1644-167-0x0000000000EF0000-0x0000000001590000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  4cf874c0198e4d755aae8cad258da3da
- SHA1
  
  355a020239875c9bf5c4322b2f6874f1b331ef24
- SHA256
  
  019aa6b9c8f7dbd874eb4fa3311d7281c5b746fbb62e8fd22f50e579bf8e3acd
- SHA512
  
  24e17a2c4e7631db3d39a3c97d7c040ca0d4fc777563374b09b694422f67d817b9e459bd5c2a79dc8b6fcbb9e4c9f9af777ea85f831be659f6968dc808bc726d
- SSDEEP
  
  98304:5UYD7xmFf7eUIqUhjG1siGNq4PoUP6bN:5If7eUIqOjG1rGNq5UPW
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer