stealc | 83322d6c0157f72f2df16e64ef9d3b553a937825d77e2f2c3d4e4b30b264c73a | Triage

Sharing

General

Target

2356-3-0x0000000000A20000-0x00000000010D1000-memory.dmp
Size

6.7MB
Sample

250226-ya5yys1jx6
MD5

e449303a04e842264c288fe53cb5c91f
SHA1

e2c134c19e306175c6913aba0ec64f833b25fc1e
SHA256

83322d6c0157f72f2df16e64ef9d3b553a937825d77e2f2c3d4e4b30b264c73a
SHA512

1a337f6147aad059136b67cb96ad14d16d963d0b0fc2cfc37094db680b26ad5422d87962829f5c361a3aac1b04f247f4afcac5edc2a9aa56aecf63131945ec74
SSDEEP

98304:Fl7nRFQi0zW3+QI3g+fsPTQWEYtYJqVxlaRlNweliiI:HmfoMBJ2ylGH

Score

10^/10

stealc reno discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

reno

C2

http://185.215.113.115

Attributes

url_path
/c4becf79229cb002.php

Targets

- Target
  
  2356-3-0x0000000000A20000-0x00000000010D1000-memory.dmp
- Size
  
  6.7MB
- MD5
  
  e449303a04e842264c288fe53cb5c91f
- SHA1
  
  e2c134c19e306175c6913aba0ec64f833b25fc1e
- SHA256
  
  83322d6c0157f72f2df16e64ef9d3b553a937825d77e2f2c3d4e4b30b264c73a
- SHA512
  
  1a337f6147aad059136b67cb96ad14d16d963d0b0fc2cfc37094db680b26ad5422d87962829f5c361a3aac1b04f247f4afcac5edc2a9aa56aecf63131945ec74
- SSDEEP
  
  98304:Fl7nRFQi0zW3+QI3g+fsPTQWEYtYJqVxlaRlNweliiI:HmfoMBJ2ylGH
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer