stealc | 47e5fcc949828ff0b306836285ce8b28de6a45de26293340f350a71139862fda | Triage

Sharing

General

Target

2776-3-0x0000000000390000-0x0000000000A30000-memory.dmp
Size

6.6MB
Sample

241216-rqy21stkgn
MD5

4e7e297f43ceeef2ffefa422255681a7
SHA1

8e25595b5f030cc460718ae5cd4df9e612d86dda
SHA256

47e5fcc949828ff0b306836285ce8b28de6a45de26293340f350a71139862fda
SHA512

14b45c4499f5d279fec323b7d45c3af39a0147c2a8bc133471a40284f618705143e19615e224ca5089dd9c359e0bc137de05f5bc605f53dbd343492981ab70db
SSDEEP

98304:Fn6/w3dZHYYDOeRIJVqTm8qp+BsHV4KWtF7oO:g/3YDOxJV2mbonoO

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2776-3-0x0000000000390000-0x0000000000A30000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  4e7e297f43ceeef2ffefa422255681a7
- SHA1
  
  8e25595b5f030cc460718ae5cd4df9e612d86dda
- SHA256
  
  47e5fcc949828ff0b306836285ce8b28de6a45de26293340f350a71139862fda
- SHA512
  
  14b45c4499f5d279fec323b7d45c3af39a0147c2a8bc133471a40284f618705143e19615e224ca5089dd9c359e0bc137de05f5bc605f53dbd343492981ab70db
- SSDEEP
  
  98304:Fn6/w3dZHYYDOeRIJVqTm8qp+BsHV4KWtF7oO:g/3YDOxJV2mbonoO
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer