stealc | 80e7a2a9d3f422452fd6d2ffbcfacc85e397ad0c0fb098108e30537ff607cbb1 | Triage

Sharing

General

Target

3216-393-0x0000000000EC0000-0x0000000001574000-memory.dmp
Size

6.7MB
Sample

241213-ahlchstqal
MD5

dfe9413890a582fbe3e76b4df2b3ed8a
SHA1

5fcc70b5ea1735c91330a31d0d7e01416c92ff5b
SHA256

80e7a2a9d3f422452fd6d2ffbcfacc85e397ad0c0fb098108e30537ff607cbb1
SHA512

997981d801e0965ccb154fd48f346e503d0e67f075d4a380f20af9ce594e1e7da601a27007fda8bd804407c6110cde578d7ad0564ccc3a87f97ec941b89b369c
SSDEEP

98304:oF8SfFdbzhS2f0O+MUrN7JFnnXqRK8po8ax7xj:a02UrZLXqXa

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  3216-393-0x0000000000EC0000-0x0000000001574000-memory.dmp
- Size
  
  6.7MB
- MD5
  
  dfe9413890a582fbe3e76b4df2b3ed8a
- SHA1
  
  5fcc70b5ea1735c91330a31d0d7e01416c92ff5b
- SHA256
  
  80e7a2a9d3f422452fd6d2ffbcfacc85e397ad0c0fb098108e30537ff607cbb1
- SHA512
  
  997981d801e0965ccb154fd48f346e503d0e67f075d4a380f20af9ce594e1e7da601a27007fda8bd804407c6110cde578d7ad0564ccc3a87f97ec941b89b369c
- SSDEEP
  
  98304:oF8SfFdbzhS2f0O+MUrN7JFnnXqRK8po8ax7xj:a02UrZLXqXa
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer