stealc | dba65ca5853b078f6a5413cb6034d057ecc42aa0c2064d153513715ccd7cbd32 | Triage

Sharing

General

Target

2144-56-0x0000000000810000-0x0000000000D01000-memory.dmp
Size

4.9MB
Sample

241227-pj4yksvnaw
MD5

ce9efd872ad11f0848ae99df5914abc6
SHA1

a6fd3e240e6bfb69e4be8b789f726e7842ac6cb5
SHA256

dba65ca5853b078f6a5413cb6034d057ecc42aa0c2064d153513715ccd7cbd32
SHA512

3fa6451c634b8b61e9d609e676086d05d69b79fb2ddb680d109b113792dc90dd83ae18e1c398b1ab0bce295e2b0f928d7bf8316a390fb3da7112b98c4c0babb1
SSDEEP

98304:+LxSmAxaoG2Oc0vV69FkKtHifww3c4aM:dqeHOz3c4aM

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2144-56-0x0000000000810000-0x0000000000D01000-memory.dmp
- Size
  
  4.9MB
- MD5
  
  ce9efd872ad11f0848ae99df5914abc6
- SHA1
  
  a6fd3e240e6bfb69e4be8b789f726e7842ac6cb5
- SHA256
  
  dba65ca5853b078f6a5413cb6034d057ecc42aa0c2064d153513715ccd7cbd32
- SHA512
  
  3fa6451c634b8b61e9d609e676086d05d69b79fb2ddb680d109b113792dc90dd83ae18e1c398b1ab0bce295e2b0f928d7bf8316a390fb3da7112b98c4c0babb1
- SSDEEP
  
  98304:+LxSmAxaoG2Oc0vV69FkKtHifww3c4aM:dqeHOz3c4aM
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdiscoverystealer

behavioral2

stealcdiscoverystealer