Overview

overview

10

Static

static

10

4624-72-0x...ry.exe

windows7-x64

1

4624-72-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4624-72-0x0000000000B50000-0x00000000011E6000-memory.dmp

  • Size

    6.6MB

  • MD5

    f13774b7717f9ddacba6110184eb7df1

  • SHA1

    7ec8c1790afe713772bfc2059b95e834247b9161

  • SHA256

    ca1cb7227addd7904a0fcc256b4a08910f3ad9fe2c155b3beebf3b6e44cee07d

  • SHA512

    8fe21201542533406dad0b022994a301d6e2d14b395980a266bd951e6a8621c5f1bedee58d8c14a4ebd213f541bf7c836613c125b504c04694284303ae9709b7

  • SSDEEP

    98304:Q4dMV22MF1qNimrPFxgn62EpGuLegm4RglYDl1w:EIiiCdqn628m9lYDl1

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4624-72-0x0000000000B50000-0x00000000011E6000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections