stealc | 635cffab337709d4af0bb71b2cc6d7559c78e1e3466f38bb993702d434ec9f26 | Triage

Sharing

General

Target

2380-3-0x0000000000FB0000-0x000000000163E000-memory.dmp
Size

6.6MB
Sample

241212-ze5pesyncr
MD5

6ac79d5abdecb8c5b59d0ec81968abb2
SHA1

be431a3cfb3c287abc13be7c02cd250cce288dbc
SHA256

635cffab337709d4af0bb71b2cc6d7559c78e1e3466f38bb993702d434ec9f26
SHA512

567e507500c797899b1fce49282b99062322a0e8645c6561e28613af24b37429b502f196630b01a88a95ce90e2b2a532a490fbaabeb65c88a9e367a181ac9e88
SSDEEP

98304:TsFMi3H+jeRywZP1yViOLR4QghuiyLodQSOAytuW:wNyVnREyLeONt

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2380-3-0x0000000000FB0000-0x000000000163E000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  6ac79d5abdecb8c5b59d0ec81968abb2
- SHA1
  
  be431a3cfb3c287abc13be7c02cd250cce288dbc
- SHA256
  
  635cffab337709d4af0bb71b2cc6d7559c78e1e3466f38bb993702d434ec9f26
- SHA512
  
  567e507500c797899b1fce49282b99062322a0e8645c6561e28613af24b37429b502f196630b01a88a95ce90e2b2a532a490fbaabeb65c88a9e367a181ac9e88
- SSDEEP
  
  98304:TsFMi3H+jeRywZP1yViOLR4QghuiyLodQSOAytuW:wNyVnREyLeONt
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer