Overview

overview

10

Static

static

10

4596-47-0x...ry.exe

windows7-x64

4596-47-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4596-47-0x0000000000B00000-0x0000000000FF7000-memory.dmp

  • Size

    5.0MB

  • MD5

    4f10896574bd56651ff52fac0ec0f020

  • SHA1

    e2e37ce5df4cfdf290c03b6658d2d36da98047b7

  • SHA256

    ba0e0f95e875d44a41cb8a1273cdaffd084b288ac50dcd9d655595e791e56bf6

  • SHA512

    a37d46beaa51d174df9626c91246c9e176826a0d6f5e0a110e1542cf4395118a65735612e209489575cc840c8b92a2a4668d1e3708d1db8969c35f56a445d6be

  • SSDEEP

    49152:786yBxe3BgfE367T1Jcuv7lAb/7H/xIYzU7bpGSZk:tyBxe3Bgf66X1JcW74H/xIyqbpGb

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4596-47-0x0000000000B00000-0x0000000000FF7000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections