Overview

overview

10

Static

static

10

2728-1773-...ry.exe

windows7-x64

1

2728-1773-...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2728-1773-0x0000000000B30000-0x00000000011E4000-memory.dmp

  • Size

    6.7MB

  • MD5

    2ca49f45cb456bc63a8e573abbd2c0ae

  • SHA1

    8568d4a5b9c418e1db78aa91d10e2e9648d853b4

  • SHA256

    ad01c77955ce8a86d8d2e91af9f1722f80dc9dbf61d4918fe1611ab5c6e476a6

  • SHA512

    6d329f9b9c114ffee929f7166dc268b68b453befbc030b6509dd5395965b925fa75a1a0e08eb55d649d167ae75933562086abd329742fa8040d435ebcf4892cb

  • SSDEEP

    98304:iF8SfFdbzhS2j84EMUrN7JFnnXqRK8po8ax7xj:s8OUrZLXqXa

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2728-1773-0x0000000000B30000-0x00000000011E4000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections