stealc | 86f5d5d80b7bf2d21802ad8a213e18c21749e87cccfcbf62d1fd99358e5945eb | Triage

Sharing

General

Target

169924-477-0x00000000000F0000-0x0000000000790000-memory.dmp
Size

6.6MB
Sample

241210-tctlgsvjgp
MD5

f2798ad5712ff05611b2de59571eb408
SHA1

1d417d1a69668cfc81e96929b45289b952b5570b
SHA256

86f5d5d80b7bf2d21802ad8a213e18c21749e87cccfcbf62d1fd99358e5945eb
SHA512

b3dfb28f41eff778949828e4f7bfb4fe5dcc3fa24ccea07c71140d8614108f8204250787ec372a1e5ecfc69b157d9f9223a2e87aa52dd54e3cc6e175142bad64
SSDEEP

98304:lUYD7xmlfiAlOY/ZEG1siGNq4PoUP6bN:lYfiAlOYBEG1rGNq5UPW

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  169924-477-0x00000000000F0000-0x0000000000790000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  f2798ad5712ff05611b2de59571eb408
- SHA1
  
  1d417d1a69668cfc81e96929b45289b952b5570b
- SHA256
  
  86f5d5d80b7bf2d21802ad8a213e18c21749e87cccfcbf62d1fd99358e5945eb
- SHA512
  
  b3dfb28f41eff778949828e4f7bfb4fe5dcc3fa24ccea07c71140d8614108f8204250787ec372a1e5ecfc69b157d9f9223a2e87aa52dd54e3cc6e175142bad64
- SSDEEP
  
  98304:lUYD7xmlfiAlOY/ZEG1siGNq4PoUP6bN:lYfiAlOYBEG1rGNq5UPW
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer