Overview

overview

10

Static

static

10

1556-46-0x...ry.exe

windows7-x64

1556-46-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1556-46-0x0000000000330000-0x0000000000820000-memory.dmp

  • Size

    4.9MB

  • MD5

    df3b626c3f71af97d7ebc66e35565007

  • SHA1

    d5f60a8c67d06cb9ac9e2a5a62b6d852d920f4c6

  • SHA256

    9b70074ad4881744b020661c4add089327152dbf4b6608534be651254c11b16c

  • SHA512

    c981260147f390a05a2d11672293235defb1ab65739dfd960da2e3f9bf9ef6b7046b283b0cfa15ebe0f53ab9a47433807f5aafc30339453c9cc75e31a008e621

  • SSDEEP

    49152:O+zwaI9SBXtQBz02lS3cnUZLtOh4HbC4O:BwaI9SB9Az02lSsniLsh4m4O

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1556-46-0x0000000000330000-0x0000000000820000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections