stealc | 2830254479481aa17ece8db4b6f9784808f08e5b944b5e40412bb426daf45666 | Triage

Sharing

General

Target

4652-51-0x00000000006A0000-0x0000000000B9C000-memory.dmp
Size

5.0MB
Sample

241227-fpc8daslap
MD5

101160bec7287f64103c1e45fb5cae08
SHA1

7114f8e3ddcd169b11597cd25d08827a5b0348c8
SHA256

2830254479481aa17ece8db4b6f9784808f08e5b944b5e40412bb426daf45666
SHA512

3a4860201a147c00232ce9ba1ef40ce5b9f6fb8ef368e7d9c5011f067a6b944a80b75baaf0015ffb16a9cdf47790f6ae987b3cb37a0bf4a75d097087c99c05d6
SSDEEP

49152:z25zYZX7ArNiFSb2K2f4+q13Ws+WlIoemz4M:p17ARiFSqfn0JKK4M

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  4652-51-0x00000000006A0000-0x0000000000B9C000-memory.dmp
- Size
  
  5.0MB
- MD5
  
  101160bec7287f64103c1e45fb5cae08
- SHA1
  
  7114f8e3ddcd169b11597cd25d08827a5b0348c8
- SHA256
  
  2830254479481aa17ece8db4b6f9784808f08e5b944b5e40412bb426daf45666
- SHA512
  
  3a4860201a147c00232ce9ba1ef40ce5b9f6fb8ef368e7d9c5011f067a6b944a80b75baaf0015ffb16a9cdf47790f6ae987b3cb37a0bf4a75d097087c99c05d6
- SSDEEP
  
  49152:z25zYZX7ArNiFSb2K2f4+q13Ws+WlIoemz4M:p17ARiFSqfn0JKK4M
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdiscoverystealer

behavioral2

stealcdiscoverystealer