stealc | a6387fa11a6228399ca71001f3fa65e682eee343e0977795f03b3d9f7354b10e | Triage

Sharing

General

Target

1592-617-0x0000000000C00000-0x0000000001293000-memory.dmp
Size

6.6MB
Sample

241212-ykjtgaxmhk
MD5

e0e50cb8b16e3bf4c3a410a3b33d19e4
SHA1

69f8b63cb5618f7027dfd6d7e6812fd172c079da
SHA256

a6387fa11a6228399ca71001f3fa65e682eee343e0977795f03b3d9f7354b10e
SHA512

d03a6d70cc0ec3c2d37701ecfce3f68ed0302bc056c90ed5d115e4f7ada466a8680335f00d84904ee2bc4e2b7de18f0ecc8a0c863c924850e99615e4174b2a73
SSDEEP

98304:ElqXpwkVBywHjmlq9so1W4Zz3nSxgWsQtxgVU5n+2o:E0bWAGW63F

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1592-617-0x0000000000C00000-0x0000000001293000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  e0e50cb8b16e3bf4c3a410a3b33d19e4
- SHA1
  
  69f8b63cb5618f7027dfd6d7e6812fd172c079da
- SHA256
  
  a6387fa11a6228399ca71001f3fa65e682eee343e0977795f03b3d9f7354b10e
- SHA512
  
  d03a6d70cc0ec3c2d37701ecfce3f68ed0302bc056c90ed5d115e4f7ada466a8680335f00d84904ee2bc4e2b7de18f0ecc8a0c863c924850e99615e4174b2a73
- SSDEEP
  
  98304:ElqXpwkVBywHjmlq9so1W4Zz3nSxgWsQtxgVU5n+2o:E0bWAGW63F
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer