Overview

overview

10

Static

static

10

1692-350-0...ry.exe

windows7-x64

1692-350-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1692-350-0x0000000000D10000-0x00000000011F5000-memory.dmp

  • Size

    4.9MB

  • MD5

    8eb9ce85ce6d87d21c9d6dbb22e5dc9d

  • SHA1

    40c404e77501dcbdcd242e9eef6a57696f9bc79a

  • SHA256

    ffbb1b41c9f768e48f043a74c2c53cd68db476b6159138a540eee16e002d31b1

  • SHA512

    0e22c6b25a12e8fffe805e509419f90602e7c0400cfd4ef15d9d91df915e5b9c7b921a5e8da546495631e0423fc9e2404d883add8986f06b4868ca81f2ad87e4

  • SSDEEP

    49152:5WOdgE6piCdBpkPvdTnBUdXnVwDE4RYCswak/8:oOdx6piCTpkPv1nSGxRYCDac

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1692-350-0x0000000000D10000-0x00000000011F5000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections