stealc | 2e0aba4ef1317cd5cbd71f338049a6202cb149bb3c9eeeb41ffba76297238a85 | Triage

Sharing

General

Target

2412-3-0x0000000000820000-0x0000000000ED2000-memory.dmp
Size

6.7MB
Sample

250107-pte27s1nfz
MD5

e9a83fd22f15717c387741e2eae12bd1
SHA1

36e5cfd74ffb8891e0bd2aee3df8dfcf0ba7dc72
SHA256

2e0aba4ef1317cd5cbd71f338049a6202cb149bb3c9eeeb41ffba76297238a85
SHA512

0fcd52cd2a32da2fda65b695608d6b646bb8835d267ec75cb24de4552dcce4d27143953c1d0b6237e652c985fa7dfc158f5e62e02fbec63d63b31ef7a7b34ec2
SSDEEP

98304:mBRphVOsfCmC91WH/Ly54spDBWyd39Hzl:mi9PqspltV5

Score

10^/10

stealc brat discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

brat

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2412-3-0x0000000000820000-0x0000000000ED2000-memory.dmp
- Size
  
  6.7MB
- MD5
  
  e9a83fd22f15717c387741e2eae12bd1
- SHA1
  
  36e5cfd74ffb8891e0bd2aee3df8dfcf0ba7dc72
- SHA256
  
  2e0aba4ef1317cd5cbd71f338049a6202cb149bb3c9eeeb41ffba76297238a85
- SHA512
  
  0fcd52cd2a32da2fda65b695608d6b646bb8835d267ec75cb24de4552dcce4d27143953c1d0b6237e652c985fa7dfc158f5e62e02fbec63d63b31ef7a7b34ec2
- SSDEEP
  
  98304:mBRphVOsfCmC91WH/Ly54spDBWyd39Hzl:mi9PqspltV5
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer