Overview

overview

10

Static

static

10

872-48-0x0...ry.exe

windows7-x64

872-48-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    872-48-0x00000000009B0000-0x0000000000EAE000-memory.dmp

  • Size

    5.0MB

  • MD5

    6ebcf1e0a0e257dfa92c1ae8fcf8032e

  • SHA1

    bafbb9b5b86e9c4c6ef895ab5e2c2693d93b6305

  • SHA256

    333e5752fffde1202eca4901fa9e6cc1f0fe8bb5fb7c6dfb7ed8973558c8ae88

  • SHA512

    5971a5240bb7fbca7be4a2e2926296a9d1c38c0f383d53b8f3b16a9e11b35692900bbdd0b9929a5c982b2b2c571b5e7539f85184a15505d4ae2d18f6add70f0f

  • SSDEEP

    24576:TzqxHzi83aKKQTYL01hu8b2cKIgQ/F9W/R5wAWW9ERJ+c8mFm2K/K7efILFEFdXQ:3ii6K9A1ws2clNRJ+c+mL+XXnXwpw

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 872-48-0x00000000009B0000-0x0000000000EAE000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections