Overview

overview

10

Static

static

10

2504-3-0x0...ry.exe

windows7-x64

1

2504-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2504-3-0x00000000011B0000-0x0000000001834000-memory.dmp

  • Size

    6.5MB

  • MD5

    100f5a0b258057c12c4647f09c533cdf

  • SHA1

    dde44440af22f769ee5d445aeb845efc1c1177b8

  • SHA256

    16331d495c5e7e89ca9820c5e6208e91449a6a81c8453b0762e0a10212e4869f

  • SHA512

    880619b60d1e0f5857c1577088258949f57936c09301b496f0eb78089f3f94b52203caa34ac4a113a65021017f07a36c50bf6f7843c2061a65bce8ab141ff931

  • SSDEEP

    98304:Ac2EB+SlzWvZJdTVY2Fz2wYmJTEOvnHGq5MHujf9XFh0U06:HQJ69WPGq5MkNfRR

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2504-3-0x00000000011B0000-0x0000000001834000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections