stealc | dbb6077639c1acdb880ef247ce5f777244318cf9740a4d8435eb87415e274424 | Triage

Sharing

General

Target

3916-1786-0x0000000000FF0000-0x000000000168C000-memory.dmp
Size

6.6MB
Sample

241212-s6t9faymfw
MD5

6a365b1bf5a5ff4e96e2dc40baae8a65
SHA1

fc848bd62f117de73ab8461098e2d3f5bfe51fe3
SHA256

dbb6077639c1acdb880ef247ce5f777244318cf9740a4d8435eb87415e274424
SHA512

6aa21714f88bd1021b570f181e4f41a440aae18b7d97e52d9256e81e457f105ce9a671428e1c4b676244b54f0a72ef58d3585b47676c2723a42650d4b2972351
SSDEEP

49152:bbXAI+uVB4ff0wCOjNmF8kNO7BKSRCVSrKGuY4+at/SBQ5dgqgkMu2ZFNONxDvQ+:YI+gB4FCOhmFiMS2Y6ZSi59gttLOl

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  3916-1786-0x0000000000FF0000-0x000000000168C000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  6a365b1bf5a5ff4e96e2dc40baae8a65
- SHA1
  
  fc848bd62f117de73ab8461098e2d3f5bfe51fe3
- SHA256
  
  dbb6077639c1acdb880ef247ce5f777244318cf9740a4d8435eb87415e274424
- SHA512
  
  6aa21714f88bd1021b570f181e4f41a440aae18b7d97e52d9256e81e457f105ce9a671428e1c4b676244b54f0a72ef58d3585b47676c2723a42650d4b2972351
- SSDEEP
  
  49152:bbXAI+uVB4ff0wCOjNmF8kNO7BKSRCVSrKGuY4+at/SBQ5dgqgkMu2ZFNONxDvQ+:YI+gB4FCOhmFiMS2Y6ZSi59gttLOl
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer