Overview

overview

10

Static

static

10

444-268-0x...ry.exe

windows7-x64

1

444-268-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    444-268-0x0000000000040000-0x00000000006D4000-memory.dmp

  • Size

    6.6MB

  • MD5

    bd799dfaa1029b460d2526848472a021

  • SHA1

    2f786d47a0e6147d20cac4bb25c314773eddca51

  • SHA256

    bf03d7229d83550123111acffaeaf2b71acc3681605e827a2700ac380aa33fd0

  • SHA512

    fe2f65291fe1196dd6274183f44196ba52a7571809242c13888b1320e15b107610444ec02afeabc2e49e84136aee9386390dcb3ba8bc40d1ca85a9a08a9024a0

  • SSDEEP

    98304:+sI2Ww0Y3G8qB4h8x6HyoQRW1Gc3ZasPe6oO3:+ZOh8xn/RW1GcJLG69

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 444-268-0x0000000000040000-0x00000000006D4000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections