Overview

overview

10

Static

static

10

1368-881-0...ry.exe

windows7-x64

1368-881-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1368-881-0x0000000000CD0000-0x00000000011CF000-memory.dmp

  • Size

    5.0MB

  • MD5

    03d2152202850d770aa461a6e01a546f

  • SHA1

    f646ecdae14b38cb2643454d8d5e27ca179cbc35

  • SHA256

    351840bee1870c2f12f909f385d9228eb568b81fc9151e0ac4b81e6181b7b8d5

  • SHA512

    7ee7ad0dcade6b45f005f8eaf78987633f1e9544abbe09e2f7f2c783d1f632dd9dd68ec56a3acc286a504f4e24f73b69fbbeef581f99c79f48f320ef0372f66e

  • SSDEEP

    24576:822UxuSJMA2nGBzQZwc7abkmeqTIgb2etmaWt8b3oj5/LmfrfaD8d2pTq9bqbD0q:Z21NxuUcGtSYH57Qdi5uamsaW

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1368-881-0x0000000000CD0000-0x00000000011CF000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections