Overview

overview

10

Static

static

10

1344-536-0...ry.exe

windows7-x64

1344-536-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1344-536-0x0000000000260000-0x0000000000742000-memory.dmp

  • Size

    4.9MB

  • MD5

    7dce8f97779e052de03b383d513bd621

  • SHA1

    abc679db22ff7785f514668df4dc8f7ec23bede4

  • SHA256

    94f2c37f665b35b0094053e1085ac47341515c0c3995fe8f7e96e324d5bf2038

  • SHA512

    185ece8ff39dba660048cc1816c242f1eb69cd99af457abe942246c13e8529a89d8ee97efb02bbc4dcfdfe162a7ecae7d6290bab5149e485b33c231ad9f900c4

  • SSDEEP

    49152:3/xS/2b4eIgDA0JdJYGEJTjC9H1WZcCnGZgaHa:3/xSA4x+A0JbYG6T2H1lCDa6

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1344-536-0x0000000000260000-0x0000000000742000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections