stealc | a5feda64897a58097a4f5793287a7723a4f13f040cde13db928680f7a275f7f1

General

Target
2026-11-07_16c4fb8055e391887d230a242af4218e_cobalt-strike_coinminer_icedid_knight_luca-stealer_satacom
Size 6.2MB
Sample261109-psfbkszzcs
SHA256 a5feda64897a58097a4f5793287a7723a4f13f040cde13db928680f7a275f7f1
MD5 16c4fb8055e391887d230a242af4218e
SHA1 22c0a15953bc2f0aa2370e5335ea77f5ca7869ad
SHA512 3f4410e642fad03cd560d6c4145e838f8e7e58c8ceaa07ee5ef89b1bd0c0db4f85fa71ee04ce5939f72348dbdd75ba7d10dffa0cc467fa136575739b019d79a5
SSDEEP 49152:Br3BF+vlRp1x4OFiPu2Fe6RwK+k/KpYpgbdNB0Nu8DSVKIs5AXLrHNzaeQZCq+:BHCpXjNB0oAyRrL8Cb
TLSH
T166668D33EAD319F9D4ABD63481B145527A307C8C5B7167DB2E40E2B82E723C29DB8719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

stealc

Botnet

dex1

C2

http://95.217.96.240

rc4.traffic_key

rc4.plain

Targets

- Target
  2026-11-07_16c4fb8055e391887d230a242af4218e_cobalt-strike_coinminer_icedid_knight_luca-stealer_satacom
- Size 6.2MB
- SHA256 a5feda64897a58097a4f5793287a7723a4f13f040cde13db928680f7a275f7f1
- MD5 16c4fb8055e391887d230a242af4218e
- SHA1 22c0a15953bc2f0aa2370e5335ea77f5ca7869ad
- SHA512 3f4410e642fad03cd560d6c4145e838f8e7e58c8ceaa07ee5ef89b1bd0c0db4f85fa71ee04ce5939f72348dbdd75ba7d10dffa0cc467fa136575739b019d79a5
- SSDEEP 49152:Br3BF+vlRp1x4OFiPu2Fe6RwK+k/KpYpgbdNB0Nu8DSVKIs5AXLrHNzaeQZCq+:BHCpXjNB0oAyRrL8Cb
- TLSH
  T166668D33EAD319F9D4ABD63481B145527A307C8C5B7167DB2E40E2B82E723C29DB8719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

dex1 stealc stealer
- Detects Stealc stealer Version 3
- Family: Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

3

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Stealc stealer Version 3

Family: Stealc

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2