stealc | f318e2e801070964029bd97961649134d3b4963cc6d59bf65337c02f405a9075 | Triage

Sharing

General

Target

2560-3-0x00000000012B0000-0x000000000194D000-memory.dmp
Size

6.6MB
Sample

250205-me5yzatndk
MD5

86c72a870587ef779c9ffb5c770121e7
SHA1

60ab5321b297c7cc9aee6694d368e3f085704d70
SHA256

f318e2e801070964029bd97961649134d3b4963cc6d59bf65337c02f405a9075
SHA512

97598f0b6f382e815d016b82882e3d14415958e0d542a42c9d17d39b91872a45ed6493809fbb96a1986a9c11dbbeb8adf48153fb19a7e24b0ffa1bc0093410e6
SSDEEP

98304:kHfiMAonqrstotbDgJAfVFXECbehmESXw2Fz4Zjqj:BQNJiHEC6hmEn2FEoj

Score

10^/10

stealc kira discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

kira

C2

http://185.215.113.115

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2560-3-0x00000000012B0000-0x000000000194D000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  86c72a870587ef779c9ffb5c770121e7
- SHA1
  
  60ab5321b297c7cc9aee6694d368e3f085704d70
- SHA256
  
  f318e2e801070964029bd97961649134d3b4963cc6d59bf65337c02f405a9075
- SHA512
  
  97598f0b6f382e815d016b82882e3d14415958e0d542a42c9d17d39b91872a45ed6493809fbb96a1986a9c11dbbeb8adf48153fb19a7e24b0ffa1bc0093410e6
- SSDEEP
  
  98304:kHfiMAonqrstotbDgJAfVFXECbehmESXw2Fz4Zjqj:BQNJiHEC6hmEn2FEoj
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer