stealc | 4f0a310b1a51122d73320dd360e7f45d86e5adaf4e3c9619c0a34dcba4795938 | Triage

Sharing

General

Target

1576-294-0x0000000001000000-0x000000000167E000-memory.dmp
Size

6.5MB
Sample

250225-maz7xstns2
MD5

6ae8ed803ee14ba256e0781e1615cb3d
SHA1

45decb2d74fe5b19f050a3112d20d66f3781ef59
SHA256

4f0a310b1a51122d73320dd360e7f45d86e5adaf4e3c9619c0a34dcba4795938
SHA512

892decca66ee907159d43b62f4a4abdd7d3be59feb4d21efda4df9f4e1340dc27474c7d7f71cdcf48e3f89b80b61ece3afcacc6f638f3a22f6c940575be38704
SSDEEP

49152:eeWnWOgRrG1BgaxXAPShUXclbiP/kmDW0OxqYWb3LjhyEfDNn7wX:knWOMrG1B3xXAPUIxhW0rY4hfp7w

Score

10^/10

stealc reno discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

reno

C2

http://185.215.113.115

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  1576-294-0x0000000001000000-0x000000000167E000-memory.dmp
- Size
  
  6.5MB
- MD5
  
  6ae8ed803ee14ba256e0781e1615cb3d
- SHA1
  
  45decb2d74fe5b19f050a3112d20d66f3781ef59
- SHA256
  
  4f0a310b1a51122d73320dd360e7f45d86e5adaf4e3c9619c0a34dcba4795938
- SHA512
  
  892decca66ee907159d43b62f4a4abdd7d3be59feb4d21efda4df9f4e1340dc27474c7d7f71cdcf48e3f89b80b61ece3afcacc6f638f3a22f6c940575be38704
- SSDEEP
  
  49152:eeWnWOgRrG1BgaxXAPShUXclbiP/kmDW0OxqYWb3LjhyEfDNn7wX:knWOMrG1B3xXAPUIxhW0rY4hfp7w
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer