stealc | e63c8ae5182ea5d351c48f3cfb8b6cd810232853ff4c834f9bc8a04b180f7fdd | Triage

Sharing

General

Target

1988-3-0x0000000000010000-0x00000000006B0000-memory.dmp
Size

6.6MB
Sample

241210-vewdjawjar
MD5

057beccaa5c6c95153ebbd317b8c71d3
SHA1

d6acebb15b3a356d7d54ff9a36adadb446e8c2ed
SHA256

e63c8ae5182ea5d351c48f3cfb8b6cd810232853ff4c834f9bc8a04b180f7fdd
SHA512

899dbb904c5fc940f4b7929959710e30a3982d38a59c1624fa6be1c03a8df1fbac70ad8a22c0c20d528eecd5aec85ac456a8cf3ca2788922ff38275e68df9bdc
SSDEEP

98304:NUYD7xmpfhEVfWpZAG1siGNq4PoUP6bN:N8fhEVfWvAG1rGNq5UPW

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1988-3-0x0000000000010000-0x00000000006B0000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  057beccaa5c6c95153ebbd317b8c71d3
- SHA1
  
  d6acebb15b3a356d7d54ff9a36adadb446e8c2ed
- SHA256
  
  e63c8ae5182ea5d351c48f3cfb8b6cd810232853ff4c834f9bc8a04b180f7fdd
- SHA512
  
  899dbb904c5fc940f4b7929959710e30a3982d38a59c1624fa6be1c03a8df1fbac70ad8a22c0c20d528eecd5aec85ac456a8cf3ca2788922ff38275e68df9bdc
- SSDEEP
  
  98304:NUYD7xmpfhEVfWpZAG1siGNq4PoUP6bN:N8fhEVfWvAG1rGNq5UPW
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer