Overview

overview

10

Static

static

10

536-28-0x0...ry.exe

windows7-x64

1

536-28-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    536-28-0x0000000000F20000-0x00000000015B5000-memory.dmp

  • Size

    6.6MB

  • MD5

    e2257e8331c8f63fb4c70e4330f19bcb

  • SHA1

    89d302d2b094b1774db8446ebce002f6e3d2db75

  • SHA256

    e969403e1666ffbb3e760f631f34b247e1831bd11b3125e9ee0aab5f1017dfc0

  • SHA512

    4af2fe6ccc77a00f5729d795525c0336d7d4a921cd787e0b4b2fb8eebe59c0e202b9ee19923e7900da346dc25f0f96e823ade5e93f7aa471af69075bc74707a4

  • SSDEEP

    98304:9T6QBfFi9IfVwKbs36H910gypAYASdPyRGGkBfoFaE9P:Zhw36H9UTASdqRZaE

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 536-28-0x0000000000F20000-0x00000000015B5000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections