Overview

overview

10

Static

static

10

4716-44-0x...ry.exe

windows7-x64

1

4716-44-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4716-44-0x0000000000B10000-0x000000000118C000-memory.dmp

  • Size

    6.5MB

  • MD5

    643146f5c59d54d25454269e561312ad

  • SHA1

    2d318c66d05b9ed0ba47227f78e8522261aa2f33

  • SHA256

    793b0b286d515772ded8fd05da9ad60af6490c0a0b18d650a06d0f3caf82b0c8

  • SHA512

    f72260078237963c687bfcd0da56771cbc64f3bf4dd4564e28dd7748c28515b211c844b7c7274e666e99cd95b2d6272590e0717295cf4f6e7f3a256b11a6c4e4

  • SSDEEP

    98304:EmB/tiuUTAR/HMaAZweqwMeDSxxXMUI4+cHo8bGRZ:drAPvDExcc+o1

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4716-44-0x0000000000B10000-0x000000000118C000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections