Overview

overview

10

Static

static

10

1820-3-0x0...ry.exe

windows7-x64

1820-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1820-3-0x0000000000890000-0x0000000000D83000-memory.dmp

  • Size

    4.9MB

  • MD5

    2e5b9c54cc61f785494d3204a7c5c91e

  • SHA1

    8e56896152002706b806b70bceafdb0fdcbb8f2f

  • SHA256

    1d77ac29df9b12f1fae92575a431a97ed22666a2b4c653d315d51e5a25ace286

  • SHA512

    04f89ef9884ed50c4af5a40c90b982d33e3ba2effa0efcec4a55e8686ed0b15160e8bd4cd5370bbe4af3b7b9c22bd70b42a85db47149d3dcf0a566566fbab6f4

  • SSDEEP

    24576:cfWZZPSN2cB4OiaLhZ31Jj9WX9IfCYclAfcNSj7mbSeuNyxwesm0+TiUEvwAjzAQ:KtjeO1hN4XzYJmZACsmp2fUzsW4lmM

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1820-3-0x0000000000890000-0x0000000000D83000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections