stealc | 701e14d24a1b778c292f5bc966635ffa8c8932bddcf017d96b2a6dfb7cf7e361 | Triage

Sharing

General

Target

2068-3-0x00000000009D0000-0x0000000001060000-memory.dmp
Size

6.6MB
Sample

250107-pngzlssrcj
MD5

edb748c9786b7a4c5f855dfa7edf2e48
SHA1

4cdcb7970154bdac57fb48c0882a1dc3de1cc4ed
SHA256

701e14d24a1b778c292f5bc966635ffa8c8932bddcf017d96b2a6dfb7cf7e361
SHA512

28b605e610a7e087c44bc51cb7680e4ea819ab7668f66bf3801ea51c8cf2ce899886c8600e4e4f85b736e7330b8f54dd278f4e1d1121987b045b6ee176ebdcfb
SSDEEP

98304:hPbO6IKTghmv8Z/8/XcVXYYkYLW8ukYLmVIdDchq85VO:hPnK9YLqIdD+5V

Score

10^/10

stealc brat discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

brat

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2068-3-0x00000000009D0000-0x0000000001060000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  edb748c9786b7a4c5f855dfa7edf2e48
- SHA1
  
  4cdcb7970154bdac57fb48c0882a1dc3de1cc4ed
- SHA256
  
  701e14d24a1b778c292f5bc966635ffa8c8932bddcf017d96b2a6dfb7cf7e361
- SHA512
  
  28b605e610a7e087c44bc51cb7680e4ea819ab7668f66bf3801ea51c8cf2ce899886c8600e4e4f85b736e7330b8f54dd278f4e1d1121987b045b6ee176ebdcfb
- SSDEEP
  
  98304:hPbO6IKTghmv8Z/8/XcVXYYkYLW8ukYLmVIdDchq85VO:hPnK9YLqIdD+5V
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer