Overview

overview

10

Static

static

10

4744-47-0x...ry.exe

windows7-x64

4744-47-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4744-47-0x0000000000740000-0x0000000000C32000-memory.dmp

  • Size

    4.9MB

  • MD5

    731c299001c134c6911d5d359305bb3e

  • SHA1

    594a582077c485b06de767701684b9ad3b604315

  • SHA256

    4beb1a0fea57090e7fe2b73964059cfbb13414b7ab8cbf80e7ebbc2b77d031cd

  • SHA512

    e26f7db918cc99a91b0663c230ea4587e325017d365367a01a8470229c1f00fa33366e9ef79e253ee268f955a34166cd09e949a46e24148c6d5f4945cd55ce4a

  • SSDEEP

    24576:Y/Lxt35+Wi9RTts97v12lTgYMqaHh/L6kQENBkyPRQASVzL0Iq9r2Me+7sd3+vL5:+T5+rT8hzjyzMxiOTWTa4V

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4744-47-0x0000000000740000-0x0000000000C32000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections