Overview

overview

10

Static

static

10

2104-47-0x...ry.exe

windows7-x64

2104-47-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2104-47-0x0000000000860000-0x0000000000D5B000-memory.dmp

  • Size

    5.0MB

  • MD5

    ea7b03f2ab74ab0e7c4b75a0ac6e9846

  • SHA1

    11fe81ddbcc248a24606f41cf5564725f4bcc8b7

  • SHA256

    0dd9e20451094e12f4e453a472d17f816f72b1d692f1994c8e7a0dde39f89328

  • SHA512

    1e47562b2d31d07f156e599f2eb3274e0777bcf82234eb97cf02ea840952a94571348c85316b9532923368d5473aaa00f472d17cf012eb9b21c120d64e9ca861

  • SSDEEP

    24576:byHu07L1LfFKO6tTJ53MrtE6kLT+5KEN0E0IJH0g5hamF0f2XJhf9zO+srEXGpws:eHug1Lfsv3Z7wPH96+sr3+juFSY

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2104-47-0x0000000000860000-0x0000000000D5B000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections