stealc | 42f8c94576070aef6481839824ba31cda563b52f10f1fc5d0b8cd51b98e6acd9 | Triage

Sharing

General

Target

2716-214-0x0000000000100000-0x0000000000796000-memory.dmp
Size

6.6MB
Sample

241212-ysh7xawkc1
MD5

b847ae60fbc90a6bd360e0468555fe30
SHA1

e226ff4ebd1e2014b458bece29c238dde940ec17
SHA256

42f8c94576070aef6481839824ba31cda563b52f10f1fc5d0b8cd51b98e6acd9
SHA512

c0b891b53db9727ab20b60d21a86ff6a75b7cd40a7df6ec7113d90c6546502d1c36338550f2c3b28ca2cdd2af111697d271d209d52ee0c1119f871e62456189c
SSDEEP

49152:yDDaMNzn6K6KfwTb5vvXfQNaWFZ6bSrAdE9XxyiTesWTAllGTxS:+zn6K6Kfwpv+bJrAdE9NWTalr

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2716-214-0x0000000000100000-0x0000000000796000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  b847ae60fbc90a6bd360e0468555fe30
- SHA1
  
  e226ff4ebd1e2014b458bece29c238dde940ec17
- SHA256
  
  42f8c94576070aef6481839824ba31cda563b52f10f1fc5d0b8cd51b98e6acd9
- SHA512
  
  c0b891b53db9727ab20b60d21a86ff6a75b7cd40a7df6ec7113d90c6546502d1c36338550f2c3b28ca2cdd2af111697d271d209d52ee0c1119f871e62456189c
- SSDEEP
  
  49152:yDDaMNzn6K6KfwTb5vvXfQNaWFZ6bSrAdE9XxyiTesWTAllGTxS:+zn6K6Kfwpv+bJrAdE9NWTalr
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer