stealc | ccdaa7ab08debe2ca2af232be238f0903630882f93681cd83a25753d18988deb | Triage

Sharing

General

Target

3036-45-0x0000000000540000-0x0000000000BD7000-memory.dmp
Size

6.6MB
Sample

241210-xe8d7synal
MD5

10d7e9cdc51ddbe617b8b6636d480b1b
SHA1

cb05331fc9edf761a4a5db93dfe121daa909656f
SHA256

ccdaa7ab08debe2ca2af232be238f0903630882f93681cd83a25753d18988deb
SHA512

380efa247c455900ce26b977435db1ced7a53dc330f3951ecc9c9bbd0f3c6b728400a3d29ad0f333332cb01c1d2134e9e1c98196601864dc9323bebecdbf0bfa
SSDEEP

98304:Z7AA2aWSV9MZ5QkdkzCcqHARhivtav2aMjYepn+1QP++:ZqLSgchUbaQYgmo++

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  3036-45-0x0000000000540000-0x0000000000BD7000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  10d7e9cdc51ddbe617b8b6636d480b1b
- SHA1
  
  cb05331fc9edf761a4a5db93dfe121daa909656f
- SHA256
  
  ccdaa7ab08debe2ca2af232be238f0903630882f93681cd83a25753d18988deb
- SHA512
  
  380efa247c455900ce26b977435db1ced7a53dc330f3951ecc9c9bbd0f3c6b728400a3d29ad0f333332cb01c1d2134e9e1c98196601864dc9323bebecdbf0bfa
- SSDEEP
  
  98304:Z7AA2aWSV9MZ5QkdkzCcqHARhivtav2aMjYepn+1QP++:ZqLSgchUbaQYgmo++
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer