stealc | 2b5dc412de094692622064190eab3b3ddeb0675a6ebbbdc5c47ebd20ed6dd8ad | Triage

Sharing

General

Target

2296-3-0x00000000002E0000-0x0000000000976000-memory.dmp
Size

6.6MB
Sample

241212-tjd5da1nbr
MD5

68c72b4e52150a3abd0925ecc86f8e60
SHA1

691612d6f8f2357946abb0c980be5a154f0de860
SHA256

2b5dc412de094692622064190eab3b3ddeb0675a6ebbbdc5c47ebd20ed6dd8ad
SHA512

319671a5bde70be14b6f0e75265f4c6d5344c5908f42b1d1959988540c5733260b9ec834382e1e020876dc1eb1d2a30c0623569f8a6bd355b060c7166bd111f3
SSDEEP

98304:RVg+C8k4fzQPTlSOz3AQNA+GEuAJVPDNf2iOO72+YZbmW5w3T2godl:0lnz3AoA+G52PD92fK2++KyqT

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2296-3-0x00000000002E0000-0x0000000000976000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  68c72b4e52150a3abd0925ecc86f8e60
- SHA1
  
  691612d6f8f2357946abb0c980be5a154f0de860
- SHA256
  
  2b5dc412de094692622064190eab3b3ddeb0675a6ebbbdc5c47ebd20ed6dd8ad
- SHA512
  
  319671a5bde70be14b6f0e75265f4c6d5344c5908f42b1d1959988540c5733260b9ec834382e1e020876dc1eb1d2a30c0623569f8a6bd355b060c7166bd111f3
- SSDEEP
  
  98304:RVg+C8k4fzQPTlSOz3AQNA+GEuAJVPDNf2iOO72+YZbmW5w3T2godl:0lnz3AoA+G52PD92fK2++KyqT
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer