Overview

overview

10

Static

static

10

2004-3-0x0...ry.exe

windows7-x64

1

2004-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2004-3-0x0000000000040000-0x00000000006DA000-memory.dmp

  • Size

    6.6MB

  • MD5

    70a8d2adf2c44e83900142a3cb85f568

  • SHA1

    4b106901104428c4e9e78ecfd239c981926a21b3

  • SHA256

    274aa67f4eee18d7dadd2e2606014816ca1151b1cb7c51c6f6996884cf91dbce

  • SHA512

    ce0cec6bda53a0b7890d62bfc4e54a21b6e46f0ae41ba9687e3bd87669a84f0eddf03d9d71ad2306caa9523af0b16903ab5475c95f1f1a45a9ff593e8bcacaf0

  • SSDEEP

    98304:dp+LeqYujvr7Vz9TQ6lJgo0xhi9ngHWh4fw:CQ2goKiZY

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2004-3-0x0000000000040000-0x00000000006DA000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections