stealc | 1bc40f2aeef43eb4930d557a1bed75588743085f3bccb82b5f772584f4368896 | Triage

Sharing

General

Target

1bc40f2aeef43eb4930d557a1bed75588743085f3bccb82b5f772584f4368896.exe
Size

4.2MB
Sample

241217-cqdczsykbk
MD5

c77dbe0c32197879bc98e98d7c52a1d9
SHA1

31224b55329a7649448104bc3d8b41fc0d37987d
SHA256

1bc40f2aeef43eb4930d557a1bed75588743085f3bccb82b5f772584f4368896
SHA512

f1016cc7aad39d55dd3ae22aae9a8674fce20483bfa6a1343ae1c678775608deba40c139f988523a8f48f0b3e506f65cdc692a1ce5e4ab1b165314f38ccd25e3
SSDEEP

98304:rwe3J7Kln5i6T1Xdw4dGVEbBg4Pb58uSwb3/1udCC20x2QqsUBA:r5J7K95BddwGlgCbvMV2+2ZsY

Score

10^/10

stealc logsdiller discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

LogsDiller

C2

http://92.119.114.51

Attributes

url_path
/2048ca003d511226.php

Targets

- Target
  
  1bc40f2aeef43eb4930d557a1bed75588743085f3bccb82b5f772584f4368896.exe
- Size
  
  4.2MB
- MD5
  
  c77dbe0c32197879bc98e98d7c52a1d9
- SHA1
  
  31224b55329a7649448104bc3d8b41fc0d37987d
- SHA256
  
  1bc40f2aeef43eb4930d557a1bed75588743085f3bccb82b5f772584f4368896
- SHA512
  
  f1016cc7aad39d55dd3ae22aae9a8674fce20483bfa6a1343ae1c678775608deba40c139f988523a8f48f0b3e506f65cdc692a1ce5e4ab1b165314f38ccd25e3
- SSDEEP
  
  98304:rwe3J7Kln5i6T1Xdw4dGVEbBg4Pb58uSwb3/1udCC20x2QqsUBA:r5J7K95BddwGlgCbvMV2+2ZsY
Score

10^/10

stealc logsdiller discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealclogsdillerdiscoverystealer

behavioral2

stealclogsdillerdiscoverystealer