Overview

overview

10

Static

static

10

2064-38-0x...ry.exe

windows7-x64

1

2064-38-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2064-38-0x00000000007C0000-0x0000000000E4F000-memory.dmp

  • Size

    6.6MB

  • MD5

    3736b30f9c547415d83f88e4b785b8e8

  • SHA1

    ab5b03897f599660771db8db6f62f158f255166c

  • SHA256

    23b6d61ba935516210a9006a119a614f3ee94463433b414e9f1f5a231ce4a0ed

  • SHA512

    eb4e68fad160be98c03967e20dc2a51563a1a18883ddb4f8d4e586e4b6b8403008bb1e824c7aeac4b648f44323455213cb392b2c71cce7daaed2a199fc30ce2c

  • SSDEEP

    98304:mCGwn0WOdzL8qdf8lQmRIWuzc01hkE++FBldU:BmX8qdElPuznh++FRU

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2064-38-0x00000000007C0000-0x0000000000E4F000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections