stealc | ab4ac64ac94ffc4726f9b68cb8ab7499b76849203e8d63e58a659cedbb6c80f7 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

4168-84-0x...ry.exe

windows7-x64

1

4168-84-0x...ry.exe

windows10-2004-x64

Sharing

General

Target

4168-84-0x0000000000850000-0x0000000000EE5000-memory.dmp
Size

6.6MB
Sample

241216-r7ygtasrdw
MD5

1964ed705b63635893412da5665d8f52
SHA1

8a2ffbe1ff78b4b656a35a69a7f33243fff1b69d
SHA256

ab4ac64ac94ffc4726f9b68cb8ab7499b76849203e8d63e58a659cedbb6c80f7
SHA512

2e7aee699e006db8e0463e7261709aa5cf63c52102cade49f162bbbd8476e713e4e2afe69fd583e88e125216d45d6b97756c7e069c74377bc4e52f1bd2487442
SSDEEP

98304:UUT6QBfFi9IfVwKb2cljQjj7cpAYASdPyRGGkBfoFaE9P:UahqcljQATASdqRZaE

Score

10^/10

stealc stok discovery stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

4168-84-0x0000000000850000-0x0000000000EE5000-memory.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

4168-84-0x0000000000850000-0x0000000000EE5000-memory.exe

Resource

win10v2004-20241007-en

stealc discovery stealer

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  4168-84-0x0000000000850000-0x0000000000EE5000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  1964ed705b63635893412da5665d8f52
- SHA1
  
  8a2ffbe1ff78b4b656a35a69a7f33243fff1b69d
- SHA256
  
  ab4ac64ac94ffc4726f9b68cb8ab7499b76849203e8d63e58a659cedbb6c80f7
- SHA512
  
  2e7aee699e006db8e0463e7261709aa5cf63c52102cade49f162bbbd8476e713e4e2afe69fd583e88e125216d45d6b97756c7e069c74377bc4e52f1bd2487442
- SSDEEP
  
  98304:UUT6QBfFi9IfVwKb2cljQjj7cpAYASdPyRGGkBfoFaE9P:UahqcljQATASdqRZaE
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.