stealc | da1f1a7c5a2e0fc2fc7b9d134f6b03fcc5dabe8ecaed4f5e6bd4ec693477a491 | Triage

Sharing

General

Target

2572-4-0x0000000000930000-0x0000000000FC6000-memory.dmp
Size

6.6MB
Sample

241214-szhbasykbq
MD5

c18580db7dd046d6c2a05f266a8fd6d2
SHA1

68930ccb8ed2eeb765b6133283b5a195a09a8d45
SHA256

da1f1a7c5a2e0fc2fc7b9d134f6b03fcc5dabe8ecaed4f5e6bd4ec693477a491
SHA512

4483ec4b43ba40ae8f787e2309e4f511a09d76166589305c2acb1cffb13022965a4b360bc41bb7162e30ecf366a377d87280c5d9feaf2018f608c84e99992cb9
SSDEEP

98304:6wCMV22MF189rqpXuOxQf6REpGuLegm4RglYDl1w:dIYOZ7Of6R8m9lYDl1

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2572-4-0x0000000000930000-0x0000000000FC6000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  c18580db7dd046d6c2a05f266a8fd6d2
- SHA1
  
  68930ccb8ed2eeb765b6133283b5a195a09a8d45
- SHA256
  
  da1f1a7c5a2e0fc2fc7b9d134f6b03fcc5dabe8ecaed4f5e6bd4ec693477a491
- SHA512
  
  4483ec4b43ba40ae8f787e2309e4f511a09d76166589305c2acb1cffb13022965a4b360bc41bb7162e30ecf366a377d87280c5d9feaf2018f608c84e99992cb9
- SSDEEP
  
  98304:6wCMV22MF189rqpXuOxQf6REpGuLegm4RglYDl1w:dIYOZ7Of6R8m9lYDl1
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer