Overview

overview

10

Static

static

10

1200-441-0...ry.exe

windows7-x64

1

1200-441-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1200-441-0x0000000000840000-0x0000000000EE0000-memory.dmp

  • Size

    6.6MB

  • MD5

    7ced913a84c1fa1d5b6119dfc854b29d

  • SHA1

    613a2a1ebebb492762ae73d47ac85ba94adf0aeb

  • SHA256

    9ebc8dd16e614ac72c3fb19a703df243d9b0bd0f64a0dee8dfbeaa87bb07ef71

  • SHA512

    16f7119953a9a1a82b37df492b15ed54f4c49c7369aff1f4b9a10ee6993a078438067efd7a5862d2bcf29f3af54504aee90145013f71f3cc73cc7612e2da6b7f

  • SSDEEP

    49152:GN4Vm+iqe7ePrbYKE4DnjlF7hqmHfRH5XZZmS0dvGizzIzqNscyzqq00:fd8eHBf7cmHfRZXIvGkzzspP

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1200-441-0x0000000000840000-0x0000000000EE0000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections