stealc | d7ffc640a8a1348d99b53697929820640ac2a03ff41d3853a67aa7c1186efaa2 | Triage

Sharing

General

Target

1748-3-0x0000000000CF0000-0x0000000001383000-memory.dmp
Size

6.6MB
Sample

241212-z67yvszlel
MD5

41fdaa34509b1fffccdd80fd678b043b
SHA1

f76eb4330d2df5b82a0ff2c19f966d9f6d918134
SHA256

d7ffc640a8a1348d99b53697929820640ac2a03ff41d3853a67aa7c1186efaa2
SHA512

0898ade116a8fa61c2da56f3b93cc41d4e072405aa073175473ceaa1e210f2da2097a5f7ac1c94546fea8d7a84af41ac267ac646c4524471764c93d14573f013
SSDEEP

98304:JRxXpwkVBywHj0CXhTP1Wqrz3nSxgWsQtxgVU5n+2o:JfHWsGW63F

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1748-3-0x0000000000CF0000-0x0000000001383000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  41fdaa34509b1fffccdd80fd678b043b
- SHA1
  
  f76eb4330d2df5b82a0ff2c19f966d9f6d918134
- SHA256
  
  d7ffc640a8a1348d99b53697929820640ac2a03ff41d3853a67aa7c1186efaa2
- SHA512
  
  0898ade116a8fa61c2da56f3b93cc41d4e072405aa073175473ceaa1e210f2da2097a5f7ac1c94546fea8d7a84af41ac267ac646c4524471764c93d14573f013
- SSDEEP
  
  98304:JRxXpwkVBywHj0CXhTP1Wqrz3nSxgWsQtxgVU5n+2o:JfHWsGW63F
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer