stealc | 5bbcc49bc8f4cee7a3285f3a234e7de62cde6f8f89573d76083e351bb91b744a | Triage

Sharing

General

Target

1520-3-0x0000000000AD0000-0x0000000001168000-memory.dmp
Size

6.6MB
Sample

241212-2f212azkcy
MD5

47691931360270274906f0c6f016b51f
SHA1

ed2f4ddd077e9d455440e45cfc22dcc88fc8d33b
SHA256

5bbcc49bc8f4cee7a3285f3a234e7de62cde6f8f89573d76083e351bb91b744a
SHA512

f1380ba8e8b5cf8da0edb8a82c0f9123a4633297a4b02f7550de0e8c5abd1fbde35ec954056e2be09b0f581793fb1ba4772d528a1a1d31886bff20af2b93a45a
SSDEEP

98304:cPS2x7fcmFk8j5cykWDFYubsEPU6KmsiZ269O:gcyJDF1bsE8nmFf

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1520-3-0x0000000000AD0000-0x0000000001168000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  47691931360270274906f0c6f016b51f
- SHA1
  
  ed2f4ddd077e9d455440e45cfc22dcc88fc8d33b
- SHA256
  
  5bbcc49bc8f4cee7a3285f3a234e7de62cde6f8f89573d76083e351bb91b744a
- SHA512
  
  f1380ba8e8b5cf8da0edb8a82c0f9123a4633297a4b02f7550de0e8c5abd1fbde35ec954056e2be09b0f581793fb1ba4772d528a1a1d31886bff20af2b93a45a
- SSDEEP
  
  98304:cPS2x7fcmFk8j5cykWDFYubsEPU6KmsiZ269O:gcyJDF1bsE8nmFf
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer