Overview

overview

10

Static

static

10

2440-456-0...ry.exe

windows7-x64

1

2440-456-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2440-456-0x0000000000980000-0x0000000001013000-memory.dmp

  • Size

    6.6MB

  • MD5

    06dd0c3056fb6efa1e905b8ab7383d79

  • SHA1

    0793d328a39f48283da1e88102290ab80e55e1e5

  • SHA256

    bd9354c32d9b0ba849cecbfdeef72f45ba014582f8b9766b4c07c20419f193ee

  • SHA512

    0d57ac752e442808043ab883efd86ec3a6428ecd82025905d4adbeff5434498d50c7987630d663247eebb078723f268f5007789eccbfd09d90a71330655f4ec1

  • SSDEEP

    49152:rHXp6VWq+f53TNo5/GFxksqyD0YmZWPWpR2xjy7GF1rbutHuu0LcNrFjoH9np:LAVWq+f5PaBXpRejy67mZuuM8oV

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2440-456-0x0000000000980000-0x0000000001013000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections