stealc | 4578bf9ea9b6c529a1c0c9419d0dc2ea1f7e1fb84b5c72bfef0f347ab924f9d4 | Triage

Sharing

General

Target

2412-3-0x0000000000DC0000-0x000000000144D000-memory.dmp
Size

6.6MB
Sample

241212-se4c2azmak
MD5

9a0c6d77375ab7d07671aaae3e25b108
SHA1

034dd30ea2bcb3cd4a0223da4c2949645d7cb085
SHA256

4578bf9ea9b6c529a1c0c9419d0dc2ea1f7e1fb84b5c72bfef0f347ab924f9d4
SHA512

850a9297da112f7bb0dd7e5b2f8acd273a961669756a61bb00994fe819a84d5101ed4e0e9e7cc2cf8d595cadc2816d8817186736e3160336824afc421d4fbd08
SSDEEP

98304:9h9bk9OKG32/iZ111zCuFJIV003GuiEZISaNqEsF:ydy1dxPpiIlNLs

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2412-3-0x0000000000DC0000-0x000000000144D000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  9a0c6d77375ab7d07671aaae3e25b108
- SHA1
  
  034dd30ea2bcb3cd4a0223da4c2949645d7cb085
- SHA256
  
  4578bf9ea9b6c529a1c0c9419d0dc2ea1f7e1fb84b5c72bfef0f347ab924f9d4
- SHA512
  
  850a9297da112f7bb0dd7e5b2f8acd273a961669756a61bb00994fe819a84d5101ed4e0e9e7cc2cf8d595cadc2816d8817186736e3160336824afc421d4fbd08
- SSDEEP
  
  98304:9h9bk9OKG32/iZ111zCuFJIV003GuiEZISaNqEsF:ydy1dxPpiIlNLs
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer