stealc | 4e7b0682c4eb53fbf3387c88e7680775800817fd730be52c3b137ed4c45bb58b | Triage

Sharing

General

Target

4556-47-0x00000000004F0000-0x00000000009F5000-memory.dmp
Size

5.0MB
Sample

241227-slkt9swqfj
MD5

7706f74ecefebc4fd1eadd001d66bf28
SHA1

00170964bda1d32e715c771d06c83756a380295e
SHA256

4e7b0682c4eb53fbf3387c88e7680775800817fd730be52c3b137ed4c45bb58b
SHA512

42841d70d555528c5f78af7fcc88eedb055fca2f1fd2e3fe7dc347fe4764a1658a51fe8533bbefcaa221826f445edc8e01dfe435e0ed7b30cf2643e0d1d0a17e
SSDEEP

49152:prrmivCf29Vlkm8U6IGzUmsz2NBBdCy53OO:VrmivCf29Vlkm8sGzUma2NBBdv

Score

10^/10

stealc stok discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  4556-47-0x00000000004F0000-0x00000000009F5000-memory.dmp
- Size
  
  5.0MB
- MD5
  
  7706f74ecefebc4fd1eadd001d66bf28
- SHA1
  
  00170964bda1d32e715c771d06c83756a380295e
- SHA256
  
  4e7b0682c4eb53fbf3387c88e7680775800817fd730be52c3b137ed4c45bb58b
- SHA512
  
  42841d70d555528c5f78af7fcc88eedb055fca2f1fd2e3fe7dc347fe4764a1658a51fe8533bbefcaa221826f445edc8e01dfe435e0ed7b30cf2643e0d1d0a17e
- SSDEEP
  
  49152:prrmivCf29Vlkm8U6IGzUmsz2NBBdCy53OO:VrmivCf29Vlkm8sGzUma2NBBdv
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdiscoverystealer

behavioral2

stealcdiscoverystealer