Overview

overview

10

Static

static

10

1632-3-0x0...ry.exe

windows7-x64

1632-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1632-3-0x0000000001290000-0x0000000001781000-memory.dmp

  • Size

    4.9MB

  • MD5

    9a7b34344a4a2dbf83e74895a45dc20c

  • SHA1

    7294fa531e376c067f0a0aa787ef4c504704c775

  • SHA256

    6aa22a6f39311c56e3c1e33ee6faac1d300b80d28ab4b9ea32cab6647f758e85

  • SHA512

    fa86e18ef374e362fe3f53d92688181542af7fddb571072e8c5cc2f971fbe2a442500e9eb035ad24b28af4988ea22d6f7249ff0a8a649846e7faf08a5fa43fdd

  • SSDEEP

    49152:2EjIb6b6i9KvgjHGk/IE0GaZ60j37tb5Iod9cT3B2K0E:9jIb6b6i9KvgjGk/I8G6erbIoOB2K0E

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1632-3-0x0000000001290000-0x0000000001781000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections