stealc | bf081ac73fe25f3878011d9d80f5ecb86b1d74b45714181a17db98ac96915509 | Triage

Sharing

General

Target

2740-417-0x00000000010C0000-0x0000000001759000-memory.dmp
Size

6.6MB
Sample

241212-z1x7gaxndz
MD5

9e06bb0311a59acc95a7676fb2fee742
SHA1

31b605f547226815fdcf11130065cc353658e114
SHA256

bf081ac73fe25f3878011d9d80f5ecb86b1d74b45714181a17db98ac96915509
SHA512

57a4eae8287850f6ceab1ada077d47f623a09425313dcc264eae0f143f3dbb3ccd372f5c4cc850bbf06a046edeae7b83e62eacf2b36ab860b14b9435b6a3cb4b
SSDEEP

98304:vVsBcY2CyQ+4jLk3xMX8FjR/e7cH+7e1:3qlk3xMX8f/eD6

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2740-417-0x00000000010C0000-0x0000000001759000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  9e06bb0311a59acc95a7676fb2fee742
- SHA1
  
  31b605f547226815fdcf11130065cc353658e114
- SHA256
  
  bf081ac73fe25f3878011d9d80f5ecb86b1d74b45714181a17db98ac96915509
- SHA512
  
  57a4eae8287850f6ceab1ada077d47f623a09425313dcc264eae0f143f3dbb3ccd372f5c4cc850bbf06a046edeae7b83e62eacf2b36ab860b14b9435b6a3cb4b
- SSDEEP
  
  98304:vVsBcY2CyQ+4jLk3xMX8FjR/e7cH+7e1:3qlk3xMX8f/eD6
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer