Overview

overview

10

Static

static

10

2888-47-0x...ry.exe

windows7-x64

2888-47-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2888-47-0x00000000007E0000-0x0000000000CE0000-memory.dmp

  • Size

    5.0MB

  • MD5

    804ebfd6188f6aa5ba4f2570e2c3f928

  • SHA1

    0edf5b3a34d9b9dce9753cc5d0e96a0f4cb53c03

  • SHA256

    01d029232ce1533b8cc4a0558340f95eacae2c08e85534a977a476d49228bc46

  • SHA512

    422b0ef19937c5606a83606b42d4be387c34db9b7dcfdd0309aa18f03d4c2dedb7bbde509d9982972289012d45026f3d89f9c0a9e948c01810be5b50bdacd3c0

  • SSDEEP

    24576:CZg5QpOwjWjTIg6kTYBIaEk+Um3nfAluS3D/gKqC2ScIIhvPugcuPrH7c2HcArL2:l2Owj+j90BI2+UZYcAzLHuy+Akf7xUY

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2888-47-0x00000000007E0000-0x0000000000CE0000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections