Overview

overview

10

Static

static

10

2404-3-0x0...ry.exe

windows7-x64

1

2404-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2404-3-0x00000000013C0000-0x0000000001A62000-memory.dmp

  • Size

    6.6MB

  • MD5

    99a46b88880c888dc57cbd52141a83a1

  • SHA1

    6f3df968a17b27fe3aabc1e05cce444a21a4e1b8

  • SHA256

    12ecd3b5b8004261ee007dc97f3f220a195d9f0b1d50c22debc67d3d9f779736

  • SHA512

    ecc4f16a37271415c747df235e902b689fb482625afa131dbee5a4d6a52effc65be287c5eeb37f7927d57b20ae75f827fa60381188d00807f39a1ca823043a4c

  • SSDEEP

    98304:Ln9CrHVQ7/OjkWytMMbYoOI5ZuxnM6NxTA3y:o1rjD8Fb3O2MxnM6TA3y

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2404-3-0x00000000013C0000-0x0000000001A62000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections