Overview

overview

10

Static

static

10

6780-7437-...ry.exe

windows7-x64

1

6780-7437-...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6780-7437-0x0000000000A30000-0x00000000010C6000-memory.dmp

  • Size

    6.6MB

  • MD5

    0353e7b72e8e4482bde884a7abb956a4

  • SHA1

    3291b224816e0f2d2e8ed6ccf4ad37b163446b18

  • SHA256

    c5e7d7061a626da0c66e500331ea82408194e0a6787d3fe3cd2867b89b4aec48

  • SHA512

    81b99573f046975927137edd00c44c682efe9711407b935f1207ef9ac11f82ad31f2484ee9641f57a669f75fc1447d45f7e193dfff4537d555658467d08e2d0e

  • SSDEEP

    98304:UtSMV22MF1s2THvJp22x66EpGuLegm4RglYDl1w:UIzTPPVx668m9lYDl1

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6780-7437-0x0000000000A30000-0x00000000010C6000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections