Overview

overview

10

Static

static

10

2912-3-0x0...ry.exe

windows7-x64

2912-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2912-3-0x0000000000A60000-0x0000000000F5D000-memory.dmp

  • Size

    5.0MB

  • MD5

    df87f06e97af1ed268e6e517ad9c6e08

  • SHA1

    da7b2ad1041139a2be463e40bee3820137028895

  • SHA256

    a6e96aef8c0a8a600d62320f224a8ed8870c2b798589889a18d4b65fdcad341a

  • SHA512

    610877b948fdb814f1d4dd2bd8233d7be3385cb52301892d4b79aa3d79720690a0458044be29fc0ad0de142479da06a26937ddfd3259e17fc7531427b042b4cf

  • SSDEEP

    49152:tqXKj44ia9HP01DR0hhL5U+O8VlfC3AnbmPkTh:WKU/QHP01DR0hXbOctC3AnyPkV

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2912-3-0x0000000000A60000-0x0000000000F5D000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections