stealc | b6809e86e46051058133bc6bbc94be79bbb54b31d72d8eb2d988df35afdcd62a | Triage

Sharing

General

Target

2124-3-0x00000000008C0000-0x0000000000F67000-memory.dmp
Size

6.7MB
Sample

250212-1ybfcsynhp
MD5

84af295be99446f95a3b53e622d73de9
SHA1

8faf5ebc7a072820db992d8cd97ce32bc5a698b0
SHA256

b6809e86e46051058133bc6bbc94be79bbb54b31d72d8eb2d988df35afdcd62a
SHA512

0188d27aa616460ddd72897ea9e43b086bfad71c00b539ee92bb6291afb7e092d5ff1b461a8bb7e43a259c510cf573c005f4947672178962dc40a3a1c2f421d5
SSDEEP

98304:ATToYKkF3O5AV+c1PfjaDNhz0uWkOnrctDEMM:xcgTWkG41

Score

10^/10

stealc reno discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

reno

C2

http://185.215.113.115

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2124-3-0x00000000008C0000-0x0000000000F67000-memory.dmp
- Size
  
  6.7MB
- MD5
  
  84af295be99446f95a3b53e622d73de9
- SHA1
  
  8faf5ebc7a072820db992d8cd97ce32bc5a698b0
- SHA256
  
  b6809e86e46051058133bc6bbc94be79bbb54b31d72d8eb2d988df35afdcd62a
- SHA512
  
  0188d27aa616460ddd72897ea9e43b086bfad71c00b539ee92bb6291afb7e092d5ff1b461a8bb7e43a259c510cf573c005f4947672178962dc40a3a1c2f421d5
- SSDEEP
  
  98304:ATToYKkF3O5AV+c1PfjaDNhz0uWkOnrctDEMM:xcgTWkG41
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer