Overview

overview

10

Static

static

10

2888-47-0x...ry.exe

windows7-x64

2888-47-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2888-47-0x00000000007E0000-0x0000000000CE0000-memory.dmp

  • Size

    5.0MB

  • Sample

    241226-xxsfpsvraw

  • MD5

    804ebfd6188f6aa5ba4f2570e2c3f928

  • SHA1

    0edf5b3a34d9b9dce9753cc5d0e96a0f4cb53c03

  • SHA256

    01d029232ce1533b8cc4a0558340f95eacae2c08e85534a977a476d49228bc46

  • SHA512

    422b0ef19937c5606a83606b42d4be387c34db9b7dcfdd0309aa18f03d4c2dedb7bbde509d9982972289012d45026f3d89f9c0a9e948c01810be5b50bdacd3c0

  • SSDEEP

    24576:CZg5QpOwjWjTIg6kTYBIaEk+Um3nfAluS3D/gKqC2ScIIhvPugcuPrH7c2HcArL2:l2Owj+j90BI2+UZYcAzLHuy+Akf7xUY

Score
10/10
stealcstok

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Targets

    • Target

      2888-47-0x00000000007E0000-0x0000000000CE0000-memory.dmp

    • Size

      5.0MB

    • MD5

      804ebfd6188f6aa5ba4f2570e2c3f928

    • SHA1

      0edf5b3a34d9b9dce9753cc5d0e96a0f4cb53c03

    • SHA256

      01d029232ce1533b8cc4a0558340f95eacae2c08e85534a977a476d49228bc46

    • SHA512

      422b0ef19937c5606a83606b42d4be387c34db9b7dcfdd0309aa18f03d4c2dedb7bbde509d9982972289012d45026f3d89f9c0a9e948c01810be5b50bdacd3c0

    • SSDEEP

      24576:CZg5QpOwjWjTIg6kTYBIaEk+Um3nfAluS3D/gKqC2ScIIhvPugcuPrH7c2HcArL2:l2Owj+j90BI2+UZYcAzLHuy+Akf7xUY

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks