Overview

overview

10

Static

static

10

4240-47-0x...ry.exe

windows7-x64

10

4240-47-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4240-47-0x00000000001E0000-0x00000000006DB000-memory.dmp

  • Size

    5.0MB

  • MD5

    9f2d49530e18ad5932687062c84dc47d

  • SHA1

    2605a7662569ffe7ef2216ad4ef5214f89392aa4

  • SHA256

    854f0a3b38520a69b1f4a8694be3d40fc0e1c4ca94e96dc962fb061b4b6036b1

  • SHA512

    381913bcbeb741fdb2dbb9df165955ad09116952bf7e76d2c166a30301f286311d9388243e9f61e945ce4d21d00661bbe34cbbf4e853a16408d3e151c7f2f071

  • SSDEEP

    49152:tGmSFneN5v3stjGC5ZBaZYqppwZQjICgriQHdK1PMqEZ:WFnevv3stjGC5ZBP6wGciQHspMqEZ

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4240-47-0x00000000001E0000-0x00000000006DB000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections