Overview

overview

10

Static

static

10

1936-50-0x...ry.exe

windows7-x64

1936-50-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1936-50-0x0000000000E10000-0x00000000012F0000-memory.dmp

  • Size

    4.9MB

  • MD5

    d44bad4bcac329cdddac59124edf91c7

  • SHA1

    70d379f17f6f8a97efa8ee241694250d2d61937d

  • SHA256

    8771d1dc8c25b3849178afd2f5bce09a8914e643958b2f4758277b936dfe94dc

  • SHA512

    721699e14c4110a7911670c0ef629c80b60ba3cb202cbcbf5725ed693b5e5bcae7badcf896e7e534cc449d8a7ad02e0c41e02f843c98d1485c6de513b2cc6fde

  • SSDEEP

    49152:Tb8AhrS9CpSqE5PxZs51NkbzF+Syn6nDV:H8AhrCCgqE5kzmttU6nD

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1936-50-0x0000000000E10000-0x00000000012F0000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections