Overview

overview

10

Static

static

10

1956-2341-...ry.exe

windows7-x64

10

1956-2341-...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1956-2341-0x0000000000E20000-0x00000000014B6000-memory.dmp

  • Size

    6.6MB

  • MD5

    805b1a6f87b8b0df05982cfe6672c115

  • SHA1

    9b77ad9e42e8c7cbc9486f85c8a8066ad35a204f

  • SHA256

    c27fe25b6731f50b26033cbe47708d3d36feb5a794e7fcba4965d887244bb303

  • SHA512

    d2f5f9c1ad5a310252ce88e61670dffd6e2ed6a0f59c38dc85988a28377b95e79a303849b15c9820bf92626e3211cdc6f4e950a337347d92930d8ce4c2565d94

  • SSDEEP

    49152:ktHVS815OhRQ/1Y4h+SPj/JTLe2yvjlGGnnFEDtp4xrpcJdXhv22mDiEo:s4815O3Q/1Ys/J/hy5gt6ruJdXhuW

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1956-2341-0x0000000000E20000-0x00000000014B6000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections