stealc | 8cc7907ca71b6c3e234670e3b78dc273821d1bf7dab41c1ae70444f670d900a2 | Triage

Sharing

General

Target

2132-3-0x0000000000ED0000-0x000000000157F000-memory.dmp
Size

6.7MB
Sample

250107-pqjk8asrhm
MD5

379149f83c04e93004a9112f6ab10707
SHA1

c4026ca9e6e8bf8195f355002bece73434794e5f
SHA256

8cc7907ca71b6c3e234670e3b78dc273821d1bf7dab41c1ae70444f670d900a2
SHA512

174c1658750e05b06f50b75c59370ed59ba4afb0e5c4467a82e9a3641b327dab32334a0f1a0714896ac13af0c39c1f1557492b74742f8a109dd7d08a2607a17c
SSDEEP

98304:Z29DRAGXlzAjnS1i02jx2Zkiak2Pcutwli5AHQOLrG4cxb+:AbZYPcut6i5AHQOfG4S

Score

10^/10

stealc brat discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

brat

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2132-3-0x0000000000ED0000-0x000000000157F000-memory.dmp
- Size
  
  6.7MB
- MD5
  
  379149f83c04e93004a9112f6ab10707
- SHA1
  
  c4026ca9e6e8bf8195f355002bece73434794e5f
- SHA256
  
  8cc7907ca71b6c3e234670e3b78dc273821d1bf7dab41c1ae70444f670d900a2
- SHA512
  
  174c1658750e05b06f50b75c59370ed59ba4afb0e5c4467a82e9a3641b327dab32334a0f1a0714896ac13af0c39c1f1557492b74742f8a109dd7d08a2607a17c
- SSDEEP
  
  98304:Z29DRAGXlzAjnS1i02jx2Zkiak2Pcutwli5AHQOLrG4cxb+:AbZYPcut6i5AHQOfG4S
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer