Overview

overview

10

Static

static

10

620-38-0x0...ry.exe

windows7-x64

1

620-38-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    620-38-0x0000000000410000-0x0000000000AAA000-memory.dmp

  • Size

    6.6MB

  • MD5

    f6353231daacf357e04933bc4b1b0ec4

  • SHA1

    5399fd45b26e1dd9f71bccca2632a6a2471082b4

  • SHA256

    486367c826782c79a65be7b4d58815ded125d20daa4c9c859e268f4b7abd2253

  • SHA512

    499b0513223a8a584ae1bebceec5a4f366ea87b8bc12a01cf9a615daf698e8494adf7d40860bc26af9d38e804f9b06969c30f565979afa9360295e6c800494c6

  • SSDEEP

    98304:ZN6p+LeqYujvr7VzLFe6lECoSohi9ngHWh4fw:TjezCoPiZY

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 620-38-0x0000000000410000-0x0000000000AAA000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections