Overview

overview

10

Static

static

10

3128-46-0x...ry.exe

windows7-x64

10

3128-46-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3128-46-0x0000000000120000-0x0000000000614000-memory.dmp

  • Size

    5.0MB

  • MD5

    65d2bbe685e68bb7982a1a2a1577ffd3

  • SHA1

    2c0097bce5c3539c71b0e9de9501519727d55399

  • SHA256

    68c61ff7565febeb3d532d63024dc7310a1ca6c41eb28f29abb07fe13cb81abe

  • SHA512

    31d877bbe0e66a520d5b1cae679f5d7211dfbab318bf0dec773d494e9e70740fc8a0f2b0cea6831c18dbcc786acf31f18832dc4a80dd7d6188cfc622ad62bb50

  • SSDEEP

    49152:v2MczhatG4Uys1R4R/pg/CnJ96uRc4rfu0cS+xaBKV:ODlaJs1ROprJsu5rfu0zk

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3128-46-0x0000000000120000-0x0000000000614000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections