stealc | 836e81209ab1afacfb4f4874e3555d355a0966adad0be96bcd4b683a96707c57 | Triage

Sharing

General

Target

2160-3-0x0000000000230000-0x00000000008CF000-memory.dmp
Size

6.6MB
Sample

250109-ajfhnazjes
MD5

a1c548a76a19b602f289c807871f539c
SHA1

5d69da1333681400d83d64854900378138c198fd
SHA256

836e81209ab1afacfb4f4874e3555d355a0966adad0be96bcd4b683a96707c57
SHA512

a527437726bbf2fb64d18324fe15ac1a91a625757c3294698728c189393d0d791705b9b8a40d43ce12b9e3529650f11370e6c0ac6bbd658bead6aafc70bea21e
SSDEEP

98304:gSqWLM702SafAf/FhaDuL2wyt6YaRCQyZftM:e4FhaUvQQyBt

Score

10^/10

stealc brat discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

brat

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2160-3-0x0000000000230000-0x00000000008CF000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  a1c548a76a19b602f289c807871f539c
- SHA1
  
  5d69da1333681400d83d64854900378138c198fd
- SHA256
  
  836e81209ab1afacfb4f4874e3555d355a0966adad0be96bcd4b683a96707c57
- SHA512
  
  a527437726bbf2fb64d18324fe15ac1a91a625757c3294698728c189393d0d791705b9b8a40d43ce12b9e3529650f11370e6c0ac6bbd658bead6aafc70bea21e
- SSDEEP
  
  98304:gSqWLM702SafAf/FhaDuL2wyt6YaRCQyZftM:e4FhaUvQQyBt
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer