Overview

overview

10

Static

static

10

1760-3-0x0...ry.exe

windows7-x64

1

1760-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1760-3-0x0000000000B40000-0x00000000011D3000-memory.dmp

  • Size

    6.6MB

  • MD5

    db4fbfadcf32a2d3780999f0e2ce3d86

  • SHA1

    a1ae16c18b2491d7830cbdd60e18ec7cd8b85629

  • SHA256

    652d37ed3653e6d3cb5403b96422875c5b2912694399166643392939ca026cc0

  • SHA512

    d2272ede841e9dcb25f3b9c38604e4261a8bbdc3d0b94694942acb892e8531134777e8671c5e6db51bcc7331d0dbe366771ca3558af45e8fc990ca8b31d467bb

  • SSDEEP

    98304:8Qh6ipYcrV5m79W7+SG58/QdENKRqX1z70:7b5w9WqD+gENL70

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1760-3-0x0000000000B40000-0x00000000011D3000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections