Overview

overview

10

Static

static

10

3160-38-0x...ry.exe

windows7-x64

1

3160-38-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3160-38-0x0000000000720000-0x0000000000DB8000-memory.dmp

  • Size

    6.6MB

  • MD5

    428287535a65abfb19aa72d0d09cccbe

  • SHA1

    b21c9562b86c5582a146b40ed27a21631d0ec9c7

  • SHA256

    9c43d91d7f09be47d06a827a86c68acdbf67297f52cbd96fd5e4b1f5ac716074

  • SHA512

    40f8e7748d5412609ab65e2c8bd0c7b7288fd917f6851f6dd5e2768f655c54ef653f0541bcc9c071ec8d58cd494d94e4d51e37ffd03b7e85c67261d6b8d50d62

  • SSDEEP

    98304:oPS2x7fcmFk8Z5czdyo+H5bsEPU6KmsiZ269O:6cz8o+ZbsE8nmFf

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3160-38-0x0000000000720000-0x0000000000DB8000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections