Overview

overview

10

Static

static

10

2672-3-0x0...ry.exe

windows7-x64

1

2672-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2672-3-0x00000000013D0000-0x0000000001A66000-memory.dmp

  • Size

    6.6MB

  • MD5

    7aea9f6d75b9ecc72e4f49cb70a6c9e2

  • SHA1

    c7f921cbe8e399755d9c27907b73d7e7b54ed3ee

  • SHA256

    7be25a7716465e23d352c42f1922bacf26a634eafc974c6e3cb590febfea478b

  • SHA512

    5bff171232ca2f3e5fb424cabee331bf0dd1407015262e18098768a8a2df5ce004ccca457305741780de225dc88761aebada942b1b9e910180f102bf481943d9

  • SSDEEP

    49152:caczn6K6KfwTb5vvQ8f3vhHPY6bSrAdE9XxyiTesWTAllGTxS:Yzn6K6Kfwpv1SJrAdE9NWTalr

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2672-3-0x00000000013D0000-0x0000000001A66000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections