stealc | 0ec37cdcaf4f532effab79735679d2aa97abb8b2147e2c7cfcc599127bbf5e91 | Triage

Sharing

General

Target

672-64-0x0000000000D00000-0x0000000001395000-memory.dmp
Size

6.6MB
Sample

241216-r38f8asqfv
MD5

b824110698726f115a16f5606166c3a9
SHA1

05d6339de133c794ff8374cb220966f52a48e86a
SHA256

0ec37cdcaf4f532effab79735679d2aa97abb8b2147e2c7cfcc599127bbf5e91
SHA512

49057b67e79344d7a44977339530b6c2fea15e84e356c623761a2136a287f68dab667059934f39e49f05916ff9a1e8381f14399d23698f2c9819d896d53cbd3a
SSDEEP

98304:TT6QBfFi9IfVwKb5iNRpYSu0pAYASdPyRGGkBfoFaE9P:ThliNRpJTASdqRZaE

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  672-64-0x0000000000D00000-0x0000000001395000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  b824110698726f115a16f5606166c3a9
- SHA1
  
  05d6339de133c794ff8374cb220966f52a48e86a
- SHA256
  
  0ec37cdcaf4f532effab79735679d2aa97abb8b2147e2c7cfcc599127bbf5e91
- SHA512
  
  49057b67e79344d7a44977339530b6c2fea15e84e356c623761a2136a287f68dab667059934f39e49f05916ff9a1e8381f14399d23698f2c9819d896d53cbd3a
- SSDEEP
  
  98304:TT6QBfFi9IfVwKb5iNRpYSu0pAYASdPyRGGkBfoFaE9P:ThliNRpJTASdqRZaE
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer