Overview

overview

10

Static

static

10

1600-1403-...ry.exe

windows7-x64

1

1600-1403-...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1600-1403-0x00000000000E0000-0x0000000000776000-memory.dmp

  • Size

    6.6MB

  • MD5

    aa5b8e0cdfbfb52d581116736b56a3ab

  • SHA1

    d4885e92a221c89dc5c67d2c05c8459392a7bf1f

  • SHA256

    8174d0f61059812b6ace1657622ae842a6c9ba119911afff525823667d5ec435

  • SHA512

    fd4571371eed98e917a19c14e25474777d7123ea21d921dcc8fc4bf89df2608bea13042ac46dc00edcb9d60b26b7b261722b0e0eb0df7b40bb2042c3bbab73fe

  • SSDEEP

    49152:2/jHVS815OhlGiZ09heSTjHYTee2yvjlGGnnFEDtp4xrpcJdXhv22mDiEo:o4815OrGiZ0tHYChy5gt6ruJdXhuW

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1600-1403-0x00000000000E0000-0x0000000000776000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections