Overview

overview

10

Static

static

10

4084-2498-...ry.exe

windows7-x64

1

4084-2498-...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4084-2498-0x0000000001010000-0x00000000016AB000-memory.dmp

  • Size

    6.6MB

  • MD5

    335039e7d6259154f354608179de7ca6

  • SHA1

    776603d161054d8e0a964c149169da55c3194430

  • SHA256

    3f0efcfd5801f07b6534ea589a20a85ec13fbf9d53b6c5ea0e4b05a3ead1cea9

  • SHA512

    3df178283a549a47877a65182f280549e517316d9994cf3bad3d46d406780cad2f8dfb89e575453211c4095401db9eca9d7ead479d47f1e3a12b4419bc6708a4

  • SSDEEP

    98304:EptCFxC05Regn+TJ5oWVxEdF35y1UKKz4fYbBFM:taqeRTJ5oBD3WUX0mo

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4084-2498-0x0000000001010000-0x00000000016AB000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections