Overview

overview

10

Static

static

10

4928-45-0x...ry.exe

windows7-x64

1

4928-45-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4928-45-0x00000000009C0000-0x0000000001048000-memory.dmp

  • Size

    6.5MB

  • MD5

    b5ebbbb3ae5fd6ea185e9a09cd6028b1

  • SHA1

    775f60d5335cc215af17733bb05d595ddd374f2f

  • SHA256

    25cfc7a978f4ad5c5c6f77a8bd2aa1c74f070bc580080b76b5e702d2f81fb73e

  • SHA512

    0f05f1d4910dbaf53547c98179f5cdb67326b4ba7ba849dc26b2e9d551bc5959869b00dccbad4ac83fc1bcd436f1b928c3df5cb3afac5e9b7cafa637086b8ef9

  • SSDEEP

    98304:UEdE9FsemnJAazD0GUkFyOy9XQsNg+ca:UU0GUkAOgQQdc

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4928-45-0x00000000009C0000-0x0000000001048000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections