Overview

overview

10

Static

static

10

1776-174-0...ry.exe

windows7-x64

1

1776-174-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1776-174-0x0000000001300000-0x00000000019A0000-memory.dmp

  • Size

    6.6MB

  • MD5

    b757e641402877bdff9b7f3bb06804f2

  • SHA1

    2823f04657063c894cd9f95bc45009128ad4acf4

  • SHA256

    9fb63696bb37077f00b13b3447ab808ffeaa24a4d0fd5386bf91548cc261ada7

  • SHA512

    0214c883999689cb2afa7df609115c2799a05ccfe3dfbeab253917c7a50cc649b2be6af64ae004974a4f94ae617951bb2f3f23151bc955e8775d9918b00b5ff2

  • SSDEEP

    98304:mUYD7xm3ftxLqt3oLG1siGNq4PoUP6bN:mOftxLqt4LG1rGNq5UPW

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1776-174-0x0000000001300000-0x00000000019A0000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections