stealc | 5a134a9d053be5eeaaeb699bc9bc733e78e36114d8e1fe837efe86512a14d319 | Triage

Sharing

General

Target

5a134a9d053be5eeaaeb699bc9bc733e78e36114d8e1fe837efe86512a14d319.exe
Size

455KB
Sample

250124-fbkqas1pgq
MD5

117ad8836e0b9ea5e889057d4e5bd080
SHA1

78432806b2b587c92b848ea2c5d221f820c844d1
SHA256

5a134a9d053be5eeaaeb699bc9bc733e78e36114d8e1fe837efe86512a14d319
SHA512

84854a52b090bfffcbd2fd362c9544a4ef9ebf9cccea78bfcf4d667cd81109c7d8cdbadbc3964c6671cd604eed2c5bf659324999091832ddc65278d28c71221c
SSDEEP

6144:3mwyrl2Aq5eUcO+sYlO71L9Yq0DNkbtFCIQu:2wykdeO+sD7V9YvqbtFC

Score

10^/10

stealc default9_cap discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

default9_cap

C2

http://62.204.41.177

Attributes

url_path
/edd20096ecef326d.php

Targets

- Target
  
  5a134a9d053be5eeaaeb699bc9bc733e78e36114d8e1fe837efe86512a14d319.exe
- Size
  
  455KB
- MD5
  
  117ad8836e0b9ea5e889057d4e5bd080
- SHA1
  
  78432806b2b587c92b848ea2c5d221f820c844d1
- SHA256
  
  5a134a9d053be5eeaaeb699bc9bc733e78e36114d8e1fe837efe86512a14d319
- SHA512
  
  84854a52b090bfffcbd2fd362c9544a4ef9ebf9cccea78bfcf4d667cd81109c7d8cdbadbc3964c6671cd604eed2c5bf659324999091832ddc65278d28c71221c
- SSDEEP
  
  6144:3mwyrl2Aq5eUcO+sYlO71L9Yq0DNkbtFCIQu:2wykdeO+sD7V9YvqbtFC
Score

10^/10

stealc default9_cap stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdefault9_capstealer

behavioral2

stealcdefault9_capdiscoverystealer