stealc | a8be34648835d504b6db4a9f211ce847353eb500e175e4ef696245ea17a0af5e | Triage

Sharing

General

Target

9564-1941-0x0000000000A50000-0x0000000000F3F000-memory.dmp
Size

4.9MB
Sample

241227-csnazazjht
MD5

2059337156358bbf79c5e2de8a2246f5
SHA1

dead0d54aab70bbaf5b2068388bf32b04cc387d0
SHA256

a8be34648835d504b6db4a9f211ce847353eb500e175e4ef696245ea17a0af5e
SHA512

e8e283a3a777d8cdb32ff691097dcaf708898b048cf91d4a476ebeb70455b50ebbf270002d3080f5c7075c552a4b93ca3d875c4f5d9a2211d05e297e4b5ca689
SSDEEP

49152:TlwOusKdXxiTZqqJ0BYrqn3PvY2Q6M3QqpJt:eOfMXxiTgq6B33I2QLRJt

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  9564-1941-0x0000000000A50000-0x0000000000F3F000-memory.dmp
- Size
  
  4.9MB
- MD5
  
  2059337156358bbf79c5e2de8a2246f5
- SHA1
  
  dead0d54aab70bbaf5b2068388bf32b04cc387d0
- SHA256
  
  a8be34648835d504b6db4a9f211ce847353eb500e175e4ef696245ea17a0af5e
- SHA512
  
  e8e283a3a777d8cdb32ff691097dcaf708898b048cf91d4a476ebeb70455b50ebbf270002d3080f5c7075c552a4b93ca3d875c4f5d9a2211d05e297e4b5ca689
- SSDEEP
  
  49152:TlwOusKdXxiTZqqJ0BYrqn3PvY2Q6M3QqpJt:eOfMXxiTgq6B33I2QLRJt
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdiscoverystealer

behavioral2

stealcdiscoverystealer