stealc | 25cfc7a978f4ad5c5c6f77a8bd2aa1c74f070bc580080b76b5e702d2f81fb73e | Triage

Sharing

General

Target

4928-45-0x00000000009C0000-0x0000000001048000-memory.dmp
Size

6.5MB
Sample

241212-qf18ysvncw
MD5

b5ebbbb3ae5fd6ea185e9a09cd6028b1
SHA1

775f60d5335cc215af17733bb05d595ddd374f2f
SHA256

25cfc7a978f4ad5c5c6f77a8bd2aa1c74f070bc580080b76b5e702d2f81fb73e
SHA512

0f05f1d4910dbaf53547c98179f5cdb67326b4ba7ba849dc26b2e9d551bc5959869b00dccbad4ac83fc1bcd436f1b928c3df5cb3afac5e9b7cafa637086b8ef9
SSDEEP

98304:UEdE9FsemnJAazD0GUkFyOy9XQsNg+ca:UU0GUkAOgQQdc

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  4928-45-0x00000000009C0000-0x0000000001048000-memory.dmp
- Size
  
  6.5MB
- MD5
  
  b5ebbbb3ae5fd6ea185e9a09cd6028b1
- SHA1
  
  775f60d5335cc215af17733bb05d595ddd374f2f
- SHA256
  
  25cfc7a978f4ad5c5c6f77a8bd2aa1c74f070bc580080b76b5e702d2f81fb73e
- SHA512
  
  0f05f1d4910dbaf53547c98179f5cdb67326b4ba7ba849dc26b2e9d551bc5959869b00dccbad4ac83fc1bcd436f1b928c3df5cb3afac5e9b7cafa637086b8ef9
- SSDEEP
  
  98304:UEdE9FsemnJAazD0GUkFyOy9XQsNg+ca:UU0GUkAOgQQdc
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer