Overview

overview

10

Static

static

10

2560-3-0x0...ry.exe

windows7-x64

1

2560-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2560-3-0x0000000001240000-0x00000000018D8000-memory.dmp

  • Size

    6.6MB

  • MD5

    0c2319f88a86b7adae23348e79377492

  • SHA1

    8a532d64e61d67279f6427764130c2867e6f7aef

  • SHA256

    d22a79f3c53c6397168021e671578a6f953c3b49a1168080413c42bee2e2384a

  • SHA512

    4c6700957e189a8b734a069a66495781783e38321b1deed378c1505895457aa3f246163cf73979305ad45ad6beef56889e2fc49c41da3ac0cfa789e178378f03

  • SSDEEP

    49152:iqSxkfbKRRIiNLtaN0/ES6KBKWQMXtfC22WnKWP1V4xV0S+h3lTlacCoUKJ:uxkTKXI0tVF6qKWVfL1P1qxV0S+R/sO

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2560-3-0x0000000001240000-0x00000000018D8000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections