Overview

overview

10

Static

static

10

9564-1941-...ry.exe

windows7-x64

10

9564-1941-...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9564-1941-0x0000000000A50000-0x0000000000F3F000-memory.dmp

  • Size

    4.9MB

  • MD5

    2059337156358bbf79c5e2de8a2246f5

  • SHA1

    dead0d54aab70bbaf5b2068388bf32b04cc387d0

  • SHA256

    a8be34648835d504b6db4a9f211ce847353eb500e175e4ef696245ea17a0af5e

  • SHA512

    e8e283a3a777d8cdb32ff691097dcaf708898b048cf91d4a476ebeb70455b50ebbf270002d3080f5c7075c552a4b93ca3d875c4f5d9a2211d05e297e4b5ca689

  • SSDEEP

    49152:TlwOusKdXxiTZqqJ0BYrqn3PvY2Q6M3QqpJt:eOfMXxiTgq6B33I2QLRJt

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9564-1941-0x0000000000A50000-0x0000000000F3F000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections