stealc | a20fd9cd8a4316e42efe6f6ff3623e56b579a2cb89d88ca84db2deda5678a7c3 | Triage

Sharing

General

Target

2008-38-0x00000000000A0000-0x0000000000730000-memory.dmp
Size

6.6MB
Sample

241212-xxvaaswnhn
MD5

a33e6ca5816cb40593bf037bfbb662a2
SHA1

a6b70f348e2f08e19da79d20b6a91e0dff561f68
SHA256

a20fd9cd8a4316e42efe6f6ff3623e56b579a2cb89d88ca84db2deda5678a7c3
SHA512

c8c5c60191aab6b01e0b169f454f34980faa5e0eb602b23d5ab8e0c53889a63a665380fe316c2dc24d072b2db19d030a009ac3740a78fe5bfc345e671001c59c
SSDEEP

98304:wegfdT7yfkViY4/MIG0H+fquEsXKs3BU3o9kY4/kB:iiYbrcNuj6Cm3oG

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2008-38-0x00000000000A0000-0x0000000000730000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  a33e6ca5816cb40593bf037bfbb662a2
- SHA1
  
  a6b70f348e2f08e19da79d20b6a91e0dff561f68
- SHA256
  
  a20fd9cd8a4316e42efe6f6ff3623e56b579a2cb89d88ca84db2deda5678a7c3
- SHA512
  
  c8c5c60191aab6b01e0b169f454f34980faa5e0eb602b23d5ab8e0c53889a63a665380fe316c2dc24d072b2db19d030a009ac3740a78fe5bfc345e671001c59c
- SSDEEP
  
  98304:wegfdT7yfkViY4/MIG0H+fquEsXKs3BU3o9kY4/kB:iiYbrcNuj6Cm3oG
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer