Overview

overview

10

Static

static

10

2264-3-0x0...ry.exe

windows7-x64

2264-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2264-3-0x00000000012C0000-0x00000000017C6000-memory.dmp

  • Size

    5.0MB

  • MD5

    8450242b717e4651cc50f6aea4a5a2e6

  • SHA1

    db255d656eb25a760036cc474e885c92ce1abde9

  • SHA256

    d849881418fc4ac88438c2c3624f3e3f5e3a0312378a4cee2fc9b41a1cdec8ca

  • SHA512

    4d301c828f234464e5ac5b23fbe4ee47ac1efbfb6afbf6f2818205422e9103eb646d96dce6a8c68ef988070dcfc42bd57cec1b81fc0edcb8c2067ec37378e796

  • SSDEEP

    49152:tdWdCOjd0oEFQk1kvfG1E2N6iIHpBd4DUv:3WEO3EFQk1kvwE9iEbd9v

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2264-3-0x00000000012C0000-0x00000000017C6000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections