stealc | ddfacf30fb8616e02b720a738dee76f96023eda2b684be25f4d66ed93830a756 | Triage

Sharing

General

Target

2868-439-0x0000000000FD0000-0x0000000001658000-memory.dmp
Size

6.5MB
Sample

241212-rh3egawpgs
MD5

6ad3fcbbea8afca53c803aeef1397cf2
SHA1

48c802a6badb68340323ec7d142043bea9222ca8
SHA256

ddfacf30fb8616e02b720a738dee76f96023eda2b684be25f4d66ed93830a756
SHA512

451d4273ecdc0c6b62a5ef0188a208a7de87f22d78975a27e24fd7b406e76db1a7d42bf6ec02285edd7d21d6038b55ab94f09378f41391fa9f9470b57cf4f4e7
SSDEEP

98304:d3+c+/5s07GNqEGQor2Zt7nKLwEHI2TbKpEoFT:2GqQu2Zt7n2wZ2ySoF

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2868-439-0x0000000000FD0000-0x0000000001658000-memory.dmp
- Size
  
  6.5MB
- MD5
  
  6ad3fcbbea8afca53c803aeef1397cf2
- SHA1
  
  48c802a6badb68340323ec7d142043bea9222ca8
- SHA256
  
  ddfacf30fb8616e02b720a738dee76f96023eda2b684be25f4d66ed93830a756
- SHA512
  
  451d4273ecdc0c6b62a5ef0188a208a7de87f22d78975a27e24fd7b406e76db1a7d42bf6ec02285edd7d21d6038b55ab94f09378f41391fa9f9470b57cf4f4e7
- SSDEEP
  
  98304:d3+c+/5s07GNqEGQor2Zt7nKLwEHI2TbKpEoFT:2GqQu2Zt7n2wZ2ySoF
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer