stealc | ab70f3395342989cb55d1ce2f9f2b9aefeec84218867b3ad144b29979811621c | Triage

Sharing

General

Target

2612-634-0x0000000000920000-0x0000000000FB0000-memory.dmp
Size

6.6MB
Sample

250225-sg67ps1r18
MD5

470865dfa8c1d41f7b0f3d56adf21354
SHA1

7a861fb80973b6b1454fd58eb31fa26cf5a42745
SHA256

ab70f3395342989cb55d1ce2f9f2b9aefeec84218867b3ad144b29979811621c
SHA512

4e907fa1df4ab5d70e8758b21568eb10345cb209a1467b0e850b7a93705a35438b7938be049567baa8ee21dd18d976c2bd4ecbbc7f0295b1f76333f425a96376
SSDEEP

98304:bZrPCUw5RWQrcv8Tb517b7Ei86j9YA6N3R1H8YWVjzKdJvnHk8Hq:owinYAsRdhcSdxnHT

Score

10^/10

stealc reno discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

reno

C2

http://185.215.113.115

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2612-634-0x0000000000920000-0x0000000000FB0000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  470865dfa8c1d41f7b0f3d56adf21354
- SHA1
  
  7a861fb80973b6b1454fd58eb31fa26cf5a42745
- SHA256
  
  ab70f3395342989cb55d1ce2f9f2b9aefeec84218867b3ad144b29979811621c
- SHA512
  
  4e907fa1df4ab5d70e8758b21568eb10345cb209a1467b0e850b7a93705a35438b7938be049567baa8ee21dd18d976c2bd4ecbbc7f0295b1f76333f425a96376
- SSDEEP
  
  98304:bZrPCUw5RWQrcv8Tb517b7Ei86j9YA6N3R1H8YWVjzKdJvnHk8Hq:owinYAsRdhcSdxnHT
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer