Overview

overview

10

Static

static

10

872-48-0x0...ry.exe

windows7-x64

872-48-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    872-48-0x00000000009B0000-0x0000000000EAE000-memory.dmp

  • Size

    5.0MB

  • Sample

    241227-bphewaxpfn

  • MD5

    6ebcf1e0a0e257dfa92c1ae8fcf8032e

  • SHA1

    bafbb9b5b86e9c4c6ef895ab5e2c2693d93b6305

  • SHA256

    333e5752fffde1202eca4901fa9e6cc1f0fe8bb5fb7c6dfb7ed8973558c8ae88

  • SHA512

    5971a5240bb7fbca7be4a2e2926296a9d1c38c0f383d53b8f3b16a9e11b35692900bbdd0b9929a5c982b2b2c571b5e7539f85184a15505d4ae2d18f6add70f0f

  • SSDEEP

    24576:TzqxHzi83aKKQTYL01hu8b2cKIgQ/F9W/R5wAWW9ERJ+c8mFm2K/K7efILFEFdXQ:3ii6K9A1ws2clNRJ+c+mL+XXnXwpw

Score
10/10
stealcstok

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Targets

    • Target

      872-48-0x00000000009B0000-0x0000000000EAE000-memory.dmp

    • Size

      5.0MB

    • MD5

      6ebcf1e0a0e257dfa92c1ae8fcf8032e

    • SHA1

      bafbb9b5b86e9c4c6ef895ab5e2c2693d93b6305

    • SHA256

      333e5752fffde1202eca4901fa9e6cc1f0fe8bb5fb7c6dfb7ed8973558c8ae88

    • SHA512

      5971a5240bb7fbca7be4a2e2926296a9d1c38c0f383d53b8f3b16a9e11b35692900bbdd0b9929a5c982b2b2c571b5e7539f85184a15505d4ae2d18f6add70f0f

    • SSDEEP

      24576:TzqxHzi83aKKQTYL01hu8b2cKIgQ/F9W/R5wAWW9ERJ+c8mFm2K/K7efILFEFdXQ:3ii6K9A1ws2clNRJ+c+mL+XXnXwpw

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks