stealc | 60bf86112858208853ae7f58751b5366c9c0e3b5a42bb6a8d3a0b83c7f60f96a | Triage

Sharing

General

Target

1648-38-0x0000000000140000-0x00000000007F6000-memory.dmp
Size

6.7MB
Sample

241212-1fslxszngp
MD5

f3c266354c74f5b208d624cab923158c
SHA1

db1a45d5652250ce465669df156acfd847b41376
SHA256

60bf86112858208853ae7f58751b5366c9c0e3b5a42bb6a8d3a0b83c7f60f96a
SHA512

8b036ad593bff026b5bfdb6647771a0a428be5769cba2605eb943adea8d2a79c4372a7da16e7ac381d12134a5b9632aaf67e47a2c63781c537efd4b0289c7bd4
SSDEEP

98304:Rx0U0P7GIOm6/z5H57C3aEwo8ZpWmLjCG:qqVHlCHw5HWmL

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1648-38-0x0000000000140000-0x00000000007F6000-memory.dmp
- Size
  
  6.7MB
- MD5
  
  f3c266354c74f5b208d624cab923158c
- SHA1
  
  db1a45d5652250ce465669df156acfd847b41376
- SHA256
  
  60bf86112858208853ae7f58751b5366c9c0e3b5a42bb6a8d3a0b83c7f60f96a
- SHA512
  
  8b036ad593bff026b5bfdb6647771a0a428be5769cba2605eb943adea8d2a79c4372a7da16e7ac381d12134a5b9632aaf67e47a2c63781c537efd4b0289c7bd4
- SSDEEP
  
  98304:Rx0U0P7GIOm6/z5H57C3aEwo8ZpWmLjCG:qqVHlCHw5HWmL
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer