stealc | ad7125f6a28719ec617c4dec085b174177bc254b1e5420884d468f6fd462ab29 | Triage

Sharing

General

Target

2528-3-0x0000000000020000-0x000000000051E000-memory.dmp
Size

5.0MB
Sample

241227-rdqvwawkgv
MD5

495193dd7eacc5d27a5481be13b50b8c
SHA1

ee66155e2c55dc7c1418d584a27f4185fcb066a5
SHA256

ad7125f6a28719ec617c4dec085b174177bc254b1e5420884d468f6fd462ab29
SHA512

c9ab06ecba72dcf579dd6a4b4b3dac99aecd647cbf47f89de28c1b57275155a214dbfecabec74e5393874c98f3287831d6ba33b5f8a0d54c2923a2730a0c6006
SSDEEP

49152:fDSfv1hZ3bCD872uazzKdePOIfzn92Cihh1T1:+1hZL52dyIfznbqvJ

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2528-3-0x0000000000020000-0x000000000051E000-memory.dmp
- Size
  
  5.0MB
- MD5
  
  495193dd7eacc5d27a5481be13b50b8c
- SHA1
  
  ee66155e2c55dc7c1418d584a27f4185fcb066a5
- SHA256
  
  ad7125f6a28719ec617c4dec085b174177bc254b1e5420884d468f6fd462ab29
- SHA512
  
  c9ab06ecba72dcf579dd6a4b4b3dac99aecd647cbf47f89de28c1b57275155a214dbfecabec74e5393874c98f3287831d6ba33b5f8a0d54c2923a2730a0c6006
- SSDEEP
  
  49152:fDSfv1hZ3bCD872uazzKdePOIfzn92Cihh1T1:+1hZL52dyIfznbqvJ
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdiscoverystealer

behavioral2

stealcdiscoverystealer