Overview

overview

10

Static

static

10

2880-3-0x0...ry.exe

windows7-x64

2880-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2880-3-0x0000000000E80000-0x0000000001379000-memory.dmp

  • Size

    5.0MB

  • MD5

    bb7a26c568590a45ada7d1c6fb6b757e

  • SHA1

    d62f8d151785686b5dfa97b65e14853b8cc6e1b9

  • SHA256

    a7a166907c2e59061cf64d2db0504101602d002ccdf2a99c8386d6fa247f7aa5

  • SHA512

    a4803d3c4691c84baecf1f16b922fe23ce8ebd763ce5edf5f2a6b3a9fbdf69d4898988b9b6ee4dbde0bd2efdbf4c14e1fdbbd0928334305cb64eb450143886fe

  • SSDEEP

    49152:PwwZ1GsqsfC90uwxI5NEwmfD89NnqHQjNCxVUqu:J1GsqsfC90xI5NEwmfD83tj+VUqu

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2880-3-0x0000000000E80000-0x0000000001379000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections