stealc | f672662062ee68dc8d57e27dae0cf25f8f9df9d273ffbb72c2ab9ea8175cee17 | Triage

Sharing

General

Target

2848-3-0x00000000010D0000-0x0000000001765000-memory.dmp
Size

6.6MB
Sample

241216-s2555stpe1
MD5

6222e0e032687db66419ab922869123c
SHA1

3e8aafeac6c7cf2afca77720a931f139a8b104d6
SHA256

f672662062ee68dc8d57e27dae0cf25f8f9df9d273ffbb72c2ab9ea8175cee17
SHA512

300bfe9d3adc5c3d65a5aca01d446fd36e0e34c46616b0a8fb0dc1a3ecb2d4cb75a7f1cf125e009b89234bfb7ea6d3f73948e795262ba62b503a0688d5082b98
SSDEEP

98304:OT6QBfFi9IfVwKbS/Lk9s9zSpAYASdPyRGGkBfoFaE9P:4hG/Lk95TASdqRZaE

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2848-3-0x00000000010D0000-0x0000000001765000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  6222e0e032687db66419ab922869123c
- SHA1
  
  3e8aafeac6c7cf2afca77720a931f139a8b104d6
- SHA256
  
  f672662062ee68dc8d57e27dae0cf25f8f9df9d273ffbb72c2ab9ea8175cee17
- SHA512
  
  300bfe9d3adc5c3d65a5aca01d446fd36e0e34c46616b0a8fb0dc1a3ecb2d4cb75a7f1cf125e009b89234bfb7ea6d3f73948e795262ba62b503a0688d5082b98
- SSDEEP
  
  98304:OT6QBfFi9IfVwKbS/Lk9s9zSpAYASdPyRGGkBfoFaE9P:4hG/Lk95TASdqRZaE
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer