stealc | 091a877ac5a4a753137719d6aa6c2221912d7e09a6e4aa97013e7e03cbbf7822 | Triage

Sharing

General

Target

1608-3-0x0000000000230000-0x00000000008C7000-memory.dmp
Size

6.6MB
Sample

241210-xlk79atqax
MD5

14e2f59629e4e1eb8f61c8bd8ee1a6ac
SHA1

40981c61f08ac851c5a88690129cf87fd857a93d
SHA256

091a877ac5a4a753137719d6aa6c2221912d7e09a6e4aa97013e7e03cbbf7822
SHA512

d558b54161e351e9a63202036f4e09a3fbb67e0b7b7b7c3f8d66bee229af43f85182ab0d75a6d9ca62b820aaf1b8c6502bf910f85d40db9a669441e4429686a0
SSDEEP

98304:YqAA2aWSV9abK1giUMwmcqHARhivtav2aMjYepn+1QP++:Yf3iCMchUbaQYgmo++

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1608-3-0x0000000000230000-0x00000000008C7000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  14e2f59629e4e1eb8f61c8bd8ee1a6ac
- SHA1
  
  40981c61f08ac851c5a88690129cf87fd857a93d
- SHA256
  
  091a877ac5a4a753137719d6aa6c2221912d7e09a6e4aa97013e7e03cbbf7822
- SHA512
  
  d558b54161e351e9a63202036f4e09a3fbb67e0b7b7b7c3f8d66bee229af43f85182ab0d75a6d9ca62b820aaf1b8c6502bf910f85d40db9a669441e4429686a0
- SSDEEP
  
  98304:YqAA2aWSV9abK1giUMwmcqHARhivtav2aMjYepn+1QP++:Yf3iCMchUbaQYgmo++
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer