stealc | 075b370d107a1ee46dd84c1f9b78f74222ce5ef606d11fbd89b2aa6f7d2ce344 | Triage

Sharing

General

Target

1764-3-0x0000000000010000-0x00000000006A8000-memory.dmp
Size

6.6MB
Sample

250109-nphrvsymht
MD5

684715fc35be4026776f7d5e8a7f4f25
SHA1

f0d639b8b81bca6d82537a4daccb7946628bd40d
SHA256

075b370d107a1ee46dd84c1f9b78f74222ce5ef606d11fbd89b2aa6f7d2ce344
SHA512

ab64b07d467ef017223f825d67b4c2eba220d978b4147d2c676f57ec60cf3201b8ee9384c657e526994aef2488fd82791167126e6d5616c9cf0659b3fa0981b2
SSDEEP

98304:ySrzf2Sae/A6Sd6yeDy3jaXaJcRzVaDOs228oay+08vUw9:lo6Sd6NDy32X+iMOs0o8r

Score

10^/10

stealc brat discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

brat

C2

http://185.215.113.206

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1764-3-0x0000000000010000-0x00000000006A8000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  684715fc35be4026776f7d5e8a7f4f25
- SHA1
  
  f0d639b8b81bca6d82537a4daccb7946628bd40d
- SHA256
  
  075b370d107a1ee46dd84c1f9b78f74222ce5ef606d11fbd89b2aa6f7d2ce344
- SHA512
  
  ab64b07d467ef017223f825d67b4c2eba220d978b4147d2c676f57ec60cf3201b8ee9384c657e526994aef2488fd82791167126e6d5616c9cf0659b3fa0981b2
- SSDEEP
  
  98304:ySrzf2Sae/A6Sd6yeDy3jaXaJcRzVaDOs228oay+08vUw9:lo6Sd6NDy32X+iMOs0o8r
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer