Overview

overview

10

Static

static

10

1756-47-0x...ry.exe

windows7-x64

1756-47-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1756-47-0x0000000000430000-0x0000000000925000-memory.dmp

  • Size

    5.0MB

  • MD5

    7838e1fa7aa8afe6da031f125d767d96

  • SHA1

    133073d01a9eb96a7ea45e6ea726fcef4e1ff7a5

  • SHA256

    fd861c044d7e13126bd1d1d5eb87095921b3dbb198b73f8c1b6f9d1625897632

  • SHA512

    f4ce843e30c580db1599ba3e05a517b32fd2fc4e5e8f70a89b6b5d785675422d08e671038e905040f588d6d8b8d0b171f2cecb421d0872eb95e2a4036708aed7

  • SSDEEP

    49152:TWQclYW5Ze7F1yMOWBdUY/Tf2Nm5hh1M6kBn:fclYW5ZEFHtdz/Tfrc6kt

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1756-47-0x0000000000430000-0x0000000000925000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections