Overview

overview

10

Static

static

10

2988-38-0x...ry.exe

windows7-x64

1

2988-38-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2988-38-0x0000000000240000-0x00000000008D6000-memory.dmp

  • Size

    6.6MB

  • MD5

    6d4c8c38f4bd6c5e310754e2c777d4be

  • SHA1

    4ba3d1eb55385cf906e02f1d329cac1adf669585

  • SHA256

    fe701c9b7492a2196fa892cce7e0ea654fa3c49883e4ab1763aad6161c87d75a

  • SHA512

    36ff64db592eeedc16d5292415212550571be31ff5d5c2bd81c19390824752ae328aa2c86c360eab7f3a7c71f5d66f8ed7d56d26bd7ad434df6b33fed38ea5a7

  • SSDEEP

    98304:8Vg+C8k4fzQP/guzcASNM3GDsmLePsDf2iOO72+YZbmW5w3T2godl:9FzcAOM3GwRPsL2fK2++KyqT

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2988-38-0x0000000000240000-0x00000000008D6000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections