Overview

overview

10

Static

static

10

2372-3-0x0...ry.exe

windows7-x64

2372-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2372-3-0x0000000000180000-0x0000000000663000-memory.dmp

  • Size

    4.9MB

  • MD5

    0e7c92435baa0bf3169424d3ce258b45

  • SHA1

    6398ca49c10501f41b85ff7840424c445c4844c8

  • SHA256

    77e961b1bccddae0182651f17ac5baadea20e77b23cc748e70ddc0c323d1fdd6

  • SHA512

    51645d45ccd2bde2edfb82508df27eb4bb401184a902c0fb1b524fc04a7579eab8128e2199e259d63ed8613be790f61defea03304ae031a857882d0fe177954d

  • SSDEEP

    49152:HMvMDwqh8Ub9eQWDE9Vzc8S3Ro0GS9roUESiumc+A:hNh8Ub9eQWDEz2hoPSV0Gj+A

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2372-3-0x0000000000180000-0x0000000000663000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections