stealc | e969403e1666ffbb3e760f631f34b247e1831bd11b3125e9ee0aab5f1017dfc0 | Triage

Sharing

General

Target

536-28-0x0000000000F20000-0x00000000015B5000-memory.dmp
Size

6.6MB
Sample

241216-tgggqavqan
MD5

e2257e8331c8f63fb4c70e4330f19bcb
SHA1

89d302d2b094b1774db8446ebce002f6e3d2db75
SHA256

e969403e1666ffbb3e760f631f34b247e1831bd11b3125e9ee0aab5f1017dfc0
SHA512

4af2fe6ccc77a00f5729d795525c0336d7d4a921cd787e0b4b2fb8eebe59c0e202b9ee19923e7900da346dc25f0f96e823ade5e93f7aa471af69075bc74707a4
SSDEEP

98304:9T6QBfFi9IfVwKbs36H910gypAYASdPyRGGkBfoFaE9P:Zhw36H9UTASdqRZaE

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  536-28-0x0000000000F20000-0x00000000015B5000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  e2257e8331c8f63fb4c70e4330f19bcb
- SHA1
  
  89d302d2b094b1774db8446ebce002f6e3d2db75
- SHA256
  
  e969403e1666ffbb3e760f631f34b247e1831bd11b3125e9ee0aab5f1017dfc0
- SHA512
  
  4af2fe6ccc77a00f5729d795525c0336d7d4a921cd787e0b4b2fb8eebe59c0e202b9ee19923e7900da346dc25f0f96e823ade5e93f7aa471af69075bc74707a4
- SSDEEP
  
  98304:9T6QBfFi9IfVwKbs36H910gypAYASdPyRGGkBfoFaE9P:Zhw36H9UTASdqRZaE
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer