Overview

overview

10

Static

static

10

1864-51-0x...ry.exe

windows7-x64

10

1864-51-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1864-51-0x00000000007A0000-0x0000000000C87000-memory.dmp

  • Size

    4.9MB

  • MD5

    dbd676e8c2d482ae04fe31170e166667

  • SHA1

    f162c9884718314ef4b62b157c43ca29cdcb6bcb

  • SHA256

    0944b713e29ce4673c005fdcb597aab3d8699d16165a3e9bc006fcdd724f8c78

  • SHA512

    3fdc5886acc17834a621ed506a0e724ecbac1b7190e88e367a6b8687e4a7d392cc7fa4b37150324708eb67fa7d403531d5ce97e3657be46670840a44b4c1e1c5

  • SSDEEP

    24576:V2z4ntO7PM7GC9YJM44hLqWknqYkMN46ewhR0G4cyA+kD4/C1r8Qt2/GlLPOerZi:Qz+tN7YQhLqSPM7Jv5E/anlT5zsJ

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1864-51-0x00000000007A0000-0x0000000000C87000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections