Overview

overview

10

Static

static

10

2400-3-0x0...ry.exe

windows7-x64

1

2400-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2400-3-0x0000000001130000-0x00000000017C8000-memory.dmp

  • Size

    6.6MB

  • MD5

    59ab26d7b0312aec414da441429db5dd

  • SHA1

    28b22926426d525b8b6d97df2803ab61c3c151c5

  • SHA256

    e5bed16263c3a82dd76d26164f538fe70d33385b32e4da79275c31cdfd2d12d5

  • SHA512

    eb691f317da342fa7e02971a4b6aa990e984860d5c7ec0a130513d8467b5e9ba407b332840d2a5696afadd9c23697f0e7b246e67a5f76d1316480f293751bd62

  • SSDEEP

    49152:+7s0rPf0AS+CtWn2DjKrBym9kUrR51bycFsD8q0WR1qP2pu7Ug4Z/JlAvtu:Gs0sAS+CcnwGB9kaR51bZsQq0kAQuok

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2400-3-0x0000000001130000-0x00000000017C8000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections