Overview

overview

10

Static

static

10

2380-3-0x0...ry.exe

windows7-x64

1

2380-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2380-3-0x0000000000FB0000-0x000000000163E000-memory.dmp

  • Size

    6.6MB

  • MD5

    6ac79d5abdecb8c5b59d0ec81968abb2

  • SHA1

    be431a3cfb3c287abc13be7c02cd250cce288dbc

  • SHA256

    635cffab337709d4af0bb71b2cc6d7559c78e1e3466f38bb993702d434ec9f26

  • SHA512

    567e507500c797899b1fce49282b99062322a0e8645c6561e28613af24b37429b502f196630b01a88a95ce90e2b2a532a490fbaabeb65c88a9e367a181ac9e88

  • SSDEEP

    98304:TsFMi3H+jeRywZP1yViOLR4QghuiyLodQSOAytuW:wNyVnREyLeONt

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2380-3-0x0000000000FB0000-0x000000000163E000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections