stealc | 5ec0ca0d40ea0737601710565265bce4fbfed9e813d2ce401e038726e1155746 | Triage

Sharing

General

Target

5ec0ca0d40ea0737601710565265bce4fbfed9e813d2ce401e038726e1155746
Size

239KB
Sample

241217-1bqa1aylcz
MD5

1e6930dc9f7e53ffba84c295d8f766ed
SHA1

ac716d7c6e2d65ea845f8f2cd4252c82e387577b
SHA256

5ec0ca0d40ea0737601710565265bce4fbfed9e813d2ce401e038726e1155746
SHA512

ffdc5ed06b0a98d3216aec12ed878929defe5ebd750be9653bf14210bb104d6142bb8b9bafa0f7de5807d1d60d700b8b6f15e005504f76633869a6ae20a16890
SSDEEP

3072:rtCrbK4vn4p+U1v+N3Bz1IJ8JEchyka7Z7LU/fJWtMMJ08:paGm1U5Y1ICJU117L+JWOqz

Score

10^/10

stealc line discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

Line

C2

http://154.216.17.90

Attributes

url_path
/a48146f6763ef3af.php

Targets

- Target
  
  5ec0ca0d40ea0737601710565265bce4fbfed9e813d2ce401e038726e1155746
- Size
  
  239KB
- MD5
  
  1e6930dc9f7e53ffba84c295d8f766ed
- SHA1
  
  ac716d7c6e2d65ea845f8f2cd4252c82e387577b
- SHA256
  
  5ec0ca0d40ea0737601710565265bce4fbfed9e813d2ce401e038726e1155746
- SHA512
  
  ffdc5ed06b0a98d3216aec12ed878929defe5ebd750be9653bf14210bb104d6142bb8b9bafa0f7de5807d1d60d700b8b6f15e005504f76633869a6ae20a16890
- SSDEEP
  
  3072:rtCrbK4vn4p+U1v+N3Bz1IJ8JEchyka7Z7LU/fJWtMMJ08:paGm1U5Y1ICJU117L+JWOqz
Score

10^/10

stealc line stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealclinestealer

behavioral2

stealclinediscoverystealer