stealc | 42326cd63a515974ffa888ef736e8cfc02e5cedf600169ff2d040141d4187f7d | Triage

Sharing

General

Target

2092-3-0x0000000000170000-0x0000000000815000-memory.dmp
Size

6.6MB
Sample

250209-wjje7sykdm
MD5

05bb60a24afad04f179cbc59b004cdf6
SHA1

3bf22c298289dd0a40d8d6f6c3d9fb34afcf1b0b
SHA256

42326cd63a515974ffa888ef736e8cfc02e5cedf600169ff2d040141d4187f7d
SHA512

e88656000b13009bd2fbf79802004e46a910f9ce90d4edb964fae1d1a1d4b590e7405f2cb6d702ca9d8921ea9cbbe50bcaa41a5dfefaf48edbeae9dc3f26a2aa
SSDEEP

98304:4MCWQkifpWTfLUHpr20IDnJQTsA7yJg1RMRagn/mBV:aJrCDJQQA+Jp/C

Score

10^/10

stealc reno discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

reno

C2

http://185.215.113.115

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2092-3-0x0000000000170000-0x0000000000815000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  05bb60a24afad04f179cbc59b004cdf6
- SHA1
  
  3bf22c298289dd0a40d8d6f6c3d9fb34afcf1b0b
- SHA256
  
  42326cd63a515974ffa888ef736e8cfc02e5cedf600169ff2d040141d4187f7d
- SHA512
  
  e88656000b13009bd2fbf79802004e46a910f9ce90d4edb964fae1d1a1d4b590e7405f2cb6d702ca9d8921ea9cbbe50bcaa41a5dfefaf48edbeae9dc3f26a2aa
- SSDEEP
  
  98304:4MCWQkifpWTfLUHpr20IDnJQTsA7yJg1RMRagn/mBV:aJrCDJQQA+Jp/C
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer