Overview

overview

10

Static

static

10

584-314-0x...ry.exe

windows7-x64

584-314-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    584-314-0x0000000000C60000-0x0000000001159000-memory.dmp

  • Size

    5.0MB

  • MD5

    0ee0c3a5f127f34b1621d7e1292fc5a2

  • SHA1

    916c2f0eec8feb741b0b988ab106e00b7dae21ff

  • SHA256

    dde41d257263dc1bb5d7680f3c2b3c825df959b97b9ccdde42221c99ab5abe53

  • SHA512

    a3345fd2e58fbfd5ec8bc98534f6e5a67322ff91f2d41e65fbf9d19f98dbdf3d199d76c0cc49b867b899f4192a059ae4e6143665ae3dc8a4c6ac704d5d4b9839

  • SSDEEP

    49152:sEWt6hINPn7YepLyDlGdv8S/RE97a/yf:MQhsn7FeGD/6Va/yf

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 584-314-0x0000000000C60000-0x0000000001159000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections