stealc | cc9f9be42c249aba38f983f856101b463b2b93912142cba6ed8c2b22c6584328 | Triage

Sharing

General

Target

2688-262-0x0000000001160000-0x00000000017F3000-memory.dmp
Size

6.6MB
Sample

241216-tt2y7awjek
MD5

9755d51a15c9107136e2c5757a2037f2
SHA1

2b6e1e7131f422182cbd12f464a5ad3b5f64d6e2
SHA256

cc9f9be42c249aba38f983f856101b463b2b93912142cba6ed8c2b22c6584328
SHA512

38d718561199d5d95952d87d491fae765ef457185a0696a08065c319662b880e922d4bb23c4779ad41356abcb5ea115abef24cda15fa0895a3757135ef8a3b39
SSDEEP

98304:CXkh6ipYcrR5Q+i0DfGZ8/QdENKRqX1z70:Cqf5Q+iG+egENL70

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2688-262-0x0000000001160000-0x00000000017F3000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  9755d51a15c9107136e2c5757a2037f2
- SHA1
  
  2b6e1e7131f422182cbd12f464a5ad3b5f64d6e2
- SHA256
  
  cc9f9be42c249aba38f983f856101b463b2b93912142cba6ed8c2b22c6584328
- SHA512
  
  38d718561199d5d95952d87d491fae765ef457185a0696a08065c319662b880e922d4bb23c4779ad41356abcb5ea115abef24cda15fa0895a3757135ef8a3b39
- SSDEEP
  
  98304:CXkh6ipYcrR5Q+i0DfGZ8/QdENKRqX1z70:Cqf5Q+iG+egENL70
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer