stealc | ba2b7661d08a71adb20c571a0c8eac65ba4d46a10b372d07ecf039a29232dff6 | Triage

Sharing

General

Target

4488-1264-0x0000000000E30000-0x00000000014C0000-memory.dmp
Size

6.6MB
Sample

241212-q4xwfaxrdp
MD5

e9342d179b246595f67cbda7df8cb437
SHA1

c3f011816edd33483a2a5846e9f0d087ab5d8895
SHA256

ba2b7661d08a71adb20c571a0c8eac65ba4d46a10b372d07ecf039a29232dff6
SHA512

be03b15eb7662669dde7876c2fd688fe1e408d869643eeda87d95601ed8246faf5e1dbef9944728b18a4e6056b707fa52316fb6fb4b1b000a562c9f59a0d83af
SSDEEP

98304:9egfdT7yDz18N/ZIwbZBfquEsXKs3BU3o9kY4/kB:I8XRF8uj6Cm3oG

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  4488-1264-0x0000000000E30000-0x00000000014C0000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  e9342d179b246595f67cbda7df8cb437
- SHA1
  
  c3f011816edd33483a2a5846e9f0d087ab5d8895
- SHA256
  
  ba2b7661d08a71adb20c571a0c8eac65ba4d46a10b372d07ecf039a29232dff6
- SHA512
  
  be03b15eb7662669dde7876c2fd688fe1e408d869643eeda87d95601ed8246faf5e1dbef9944728b18a4e6056b707fa52316fb6fb4b1b000a562c9f59a0d83af
- SSDEEP
  
  98304:9egfdT7yDz18N/ZIwbZBfquEsXKs3BU3o9kY4/kB:I8XRF8uj6Cm3oG
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer