stealc | cae22f714864332a765c7dcca0dd9ef7f4e3324efa4129577ac8ab0f5d42808c | Triage

Sharing

General

Target

1744-64-0x0000000000CC0000-0x000000000135F000-memory.dmp
Size

6.6MB
Sample

241212-qmq2kaxmfq
MD5

36310aa831ea732c04febfec8c35018e
SHA1

3c474a39a4d7c08c79966ac587131cdea4e470e1
SHA256

cae22f714864332a765c7dcca0dd9ef7f4e3324efa4129577ac8ab0f5d42808c
SHA512

dea0120ad9f861885f78c7602bb0ddc91b39aed8dcfc5f00517ff2e2c55b38ad5dcb7fe4d6beecf08ba8210e13018d32b293b6cafc76ca7e2f68a2b8d7d9a552
SSDEEP

49152:xneN+fFCS00Qg1mXYt7ybkgEhaH4PWPTZewjm7d3Rzwo3IzMVUg:ANgCS00QhXw7ybkxIY6TZahzH3WMVU

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1744-64-0x0000000000CC0000-0x000000000135F000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  36310aa831ea732c04febfec8c35018e
- SHA1
  
  3c474a39a4d7c08c79966ac587131cdea4e470e1
- SHA256
  
  cae22f714864332a765c7dcca0dd9ef7f4e3324efa4129577ac8ab0f5d42808c
- SHA512
  
  dea0120ad9f861885f78c7602bb0ddc91b39aed8dcfc5f00517ff2e2c55b38ad5dcb7fe4d6beecf08ba8210e13018d32b293b6cafc76ca7e2f68a2b8d7d9a552
- SSDEEP
  
  49152:xneN+fFCS00Qg1mXYt7ybkgEhaH4PWPTZewjm7d3Rzwo3IzMVUg:ANgCS00QhXw7ybkxIY6TZahzH3WMVU
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer