stealc | c27fe25b6731f50b26033cbe47708d3d36feb5a794e7fcba4965d887244bb303 | Triage

Sharing

General

Target

1956-2341-0x0000000000E20000-0x00000000014B6000-memory.dmp
Size

6.6MB
Sample

241212-111g9sypfx
MD5

805b1a6f87b8b0df05982cfe6672c115
SHA1

9b77ad9e42e8c7cbc9486f85c8a8066ad35a204f
SHA256

c27fe25b6731f50b26033cbe47708d3d36feb5a794e7fcba4965d887244bb303
SHA512

d2f5f9c1ad5a310252ce88e61670dffd6e2ed6a0f59c38dc85988a28377b95e79a303849b15c9820bf92626e3211cdc6f4e950a337347d92930d8ce4c2565d94
SSDEEP

49152:ktHVS815OhRQ/1Y4h+SPj/JTLe2yvjlGGnnFEDtp4xrpcJdXhv22mDiEo:s4815O3Q/1Ys/J/hy5gt6ruJdXhuW

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1956-2341-0x0000000000E20000-0x00000000014B6000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  805b1a6f87b8b0df05982cfe6672c115
- SHA1
  
  9b77ad9e42e8c7cbc9486f85c8a8066ad35a204f
- SHA256
  
  c27fe25b6731f50b26033cbe47708d3d36feb5a794e7fcba4965d887244bb303
- SHA512
  
  d2f5f9c1ad5a310252ce88e61670dffd6e2ed6a0f59c38dc85988a28377b95e79a303849b15c9820bf92626e3211cdc6f4e950a337347d92930d8ce4c2565d94
- SSDEEP
  
  49152:ktHVS815OhRQ/1Y4h+SPj/JTLe2yvjlGGnnFEDtp4xrpcJdXhv22mDiEo:s4815O3Q/1Ys/J/hy5gt6ruJdXhuW
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer