Overview

overview

10

Static

static

10

1744-3-0x0...ry.exe

windows7-x64

1744-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1744-3-0x00000000012A0000-0x000000000179E000-memory.dmp

  • Size

    5.0MB

  • MD5

    3b95cf20887dd290cf4fd54c595c2bd1

  • SHA1

    5f4cb7161ad0a8682fb3cbfe8c5c0b2a3271c6b6

  • SHA256

    e6bb248ce8440da354be7e93162115c07c0aae260fffaa19e450b81fcc0f27d5

  • SHA512

    5240b4784f05acbb9086c96d8e52ad41aef4108af62427c3aeb91bfa490ef86d6cb85ed1c25daac5ce81fa94252e6dc6da35d8d6cde141115fbb63b92fe830fe

  • SSDEEP

    49152:a03JAnr+i6K9A1ws2clNlabykKBWuofLowOX:C6K9ns2ONouL/ofEwOX

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1744-3-0x00000000012A0000-0x000000000179E000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections