Overview

overview

10

Static

static

10

3404-396-0...ry.exe

windows7-x64

3404-396-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3404-396-0x0000000000C40000-0x0000000001143000-memory.dmp

  • Size

    5.0MB

  • MD5

    b35c75cf2615aec6dc33aa6359b750d4

  • SHA1

    32881a97571f71e3129be8863c1313aa2c8dc79f

  • SHA256

    65a7a2eeff2e22014491bd4b077331b91b9f20dfd50b22cccf541503bed10086

  • SHA512

    dcbd33c679bcac1ea893cc0ef522a6f8f433d4ae2a88d22c97c13640dff1ca298d6c24930f58e4a1994dedf15f8923eeb238b3e451209033a6fc4c8b28acea8f

  • SSDEEP

    49152:16LBPmRam/C1rRvIUq+7FrIOjGa4Ql45soirXpF:qPmcm/C1tIU1rnjGfQ+snr

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3404-396-0x0000000000C40000-0x0000000001143000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections