stealc | 5ca61eaa8fae62658897b83c6af088106acd1be3f809844b0796e9bea55ceea1 | Triage

Sharing

General

Target

1128-3-0x0000000000DF0000-0x0000000001494000-memory.dmp
Size

6.6MB
Sample

241213-fdzl8szrcp
MD5

a860e5e4347e91bea0c7bce24a8fa26c
SHA1

b4996b5419c31b3ada67f5efe25199fcdfc33d52
SHA256

5ca61eaa8fae62658897b83c6af088106acd1be3f809844b0796e9bea55ceea1
SHA512

5532de1c7220bdb09bb6cb6e99d283164568e1a14421d9569cadcdae864a2c61138ae849fd7d27db572b6863cb134bfa862f2f3220eaeb545bcc84b23c12a445
SSDEEP

98304:HlbvLPBFtG1yNUvLEpfLLLpK059xj4Y03o5Dm4y+HQE2:HWLaf7g07xjVX5

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1128-3-0x0000000000DF0000-0x0000000001494000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  a860e5e4347e91bea0c7bce24a8fa26c
- SHA1
  
  b4996b5419c31b3ada67f5efe25199fcdfc33d52
- SHA256
  
  5ca61eaa8fae62658897b83c6af088106acd1be3f809844b0796e9bea55ceea1
- SHA512
  
  5532de1c7220bdb09bb6cb6e99d283164568e1a14421d9569cadcdae864a2c61138ae849fd7d27db572b6863cb134bfa862f2f3220eaeb545bcc84b23c12a445
- SSDEEP
  
  98304:HlbvLPBFtG1yNUvLEpfLLLpK059xj4Y03o5Dm4y+HQE2:HWLaf7g07xjVX5
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer