Overview

overview

10

Static

static

10

2876-3-0x0...ry.exe

windows7-x64

2876-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2876-3-0x0000000000190000-0x000000000068B000-memory.dmp

  • Size

    5.0MB

  • MD5

    dda36f091f97f2b09d156e81d9bce2d3

  • SHA1

    e176f827a0d5a73d204ca8d48ceb7508b85f9bf1

  • SHA256

    922eb4155cb36cf3ba382a38fde75daace47f847680732d4c465ef6cc8970913

  • SHA512

    e95daf929332b5c24eccbe10daecf2f1cb37304303972f417c2af1a5cb19fbe8ce30bdbb0e63652ef5e87cfd1ff8c4ff425696803c8faaef545bcea439c5b055

  • SSDEEP

    24576:AY4cM07L1LfFKO6tTJ53QtE6kLT+5KE10kp7pPgLjamFJV2XJhfuzOEsrEfBnoG6:D4cMg1Lfsv3T75au6EsrIoyuFS0

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2876-3-0x0000000000190000-0x000000000068B000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections