stealc | 55f7ef2c480e85fed2b68ac0a6b0a081431cf92118ae0831a8a9275b1eca11e3

General

Target
2026-11-05_2b7bf173a18b79d76b499e441a1cc884_cobalt-strike_coinminer_frostygoop_hive_icedid_knight_luca-stealer_salatstealer_satacom_sliver
Size 4.7MB
Sample261107-gnmwvsaz9p
SHA256 55f7ef2c480e85fed2b68ac0a6b0a081431cf92118ae0831a8a9275b1eca11e3
MD5 2b7bf173a18b79d76b499e441a1cc884
SHA1 562094fac419503e9cdbaa8b439291531cf4c822
SHA512 4350afa6960297e616ee10d686ac126e36e28815af2d4b389c581149b00fab4efb22ab0d90ea7f79ad6fc84543c6a83c77d3841edb44645b6f17767ccaf6d066
SSDEEP 49152:shDcg58gNrVSiEvQVCeB385mUtLje45tPHn2U3l4DS59f4FXLVD:s2gbv8B7eUpQ
TLSH
T1D0368D1BD891D67AE8A7E77DA9AB0141B6A6BC84B73136C32E507A702D733C05D78F04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

stealc

Botnet

cru

C2

http://95.217.96.240

rc4.traffic_key

rc4.plain

Targets

- Target
  2026-11-05_2b7bf173a18b79d76b499e441a1cc884_cobalt-strike_coinminer_frostygoop_hive_icedid_knight_luca-stealer_salatstealer_satacom_sliver
- Size 4.7MB
- SHA256 55f7ef2c480e85fed2b68ac0a6b0a081431cf92118ae0831a8a9275b1eca11e3
- MD5 2b7bf173a18b79d76b499e441a1cc884
- SHA1 562094fac419503e9cdbaa8b439291531cf4c822
- SHA512 4350afa6960297e616ee10d686ac126e36e28815af2d4b389c581149b00fab4efb22ab0d90ea7f79ad6fc84543c6a83c77d3841edb44645b6f17767ccaf6d066
- SSDEEP 49152:shDcg58gNrVSiEvQVCeB385mUtLje45tPHn2U3l4DS59f4FXLVD:s2gbv8B7eUpQ
- TLSH
  T1D0368D1BD891D67AE8A7E77DA9AB0141B6A6BC84B73136C32E507A702D733C05D78F04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

cru stealc stealer
- Detects Stealc stealer Version 3
- Family: Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Stealc stealer Version 3

Family: Stealc

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2