Overview

overview

10

Static

static

10

2836-3-0x0...ry.exe

windows7-x64

2836-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2836-3-0x0000000000DA0000-0x0000000001296000-memory.dmp

  • Size

    5.0MB

  • MD5

    a94975b31ac657e9dc74745330b9bfe7

  • SHA1

    da677e7035547b96bf991c261a6b842eb2aba0c3

  • SHA256

    853745c7f9f687a0d6f110db91b83208b2cb059f5a936a2415898a590a2af65c

  • SHA512

    b03344a898bc3da143b6f29631059850c9c0ec8220bfac77dee2555a4f45e5228f9dced9bb99f5c134c9f2d548dc33759291dab38c7c1b0ac1c7a53529c157cf

  • SSDEEP

    24576:k4P8y9EKIXUDMPygZalHOiZncFx2JvIatbmmPffRv7nUMEWQa1qZiFGPQr7TDbck:lNZIXUI5iuiZ2EzJp+ovNCx1ZY40

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2836-3-0x0000000000DA0000-0x0000000001296000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections