stealc | 39dfb76c097a1a7050d28511d63a239665c70324f5cc51e54f3c505012d4211b | Triage

Sharing

General

Target

2756-3-0x0000000001050000-0x00000000016DA000-memory.dmp
Size

6.5MB
Sample

241212-tc8qea1maq
MD5

81e8366607a1a8059e1623805ab04e3b
SHA1

4e298b608afa77a059d0932673dc2b3311344f26
SHA256

39dfb76c097a1a7050d28511d63a239665c70324f5cc51e54f3c505012d4211b
SHA512

d6ab811fca503281df31c5b8218dd5934fed6d4c50a23ed0eaf761888e19f60380fc395dddd27cb37425f5226dbc790a43cd58785e909db2fdab36143e69c454
SSDEEP

98304:AE3qZLBPNPLbb2nJHWDWw5A5o4hOo/LLQ:u2pEWm4hFLLQ

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2756-3-0x0000000001050000-0x00000000016DA000-memory.dmp
- Size
  
  6.5MB
- MD5
  
  81e8366607a1a8059e1623805ab04e3b
- SHA1
  
  4e298b608afa77a059d0932673dc2b3311344f26
- SHA256
  
  39dfb76c097a1a7050d28511d63a239665c70324f5cc51e54f3c505012d4211b
- SHA512
  
  d6ab811fca503281df31c5b8218dd5934fed6d4c50a23ed0eaf761888e19f60380fc395dddd27cb37425f5226dbc790a43cd58785e909db2fdab36143e69c454
- SSDEEP
  
  98304:AE3qZLBPNPLbb2nJHWDWw5A5o4hOo/LLQ:u2pEWm4hFLLQ
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer