General
-
Target
2688-2-0x00000000011C1000-0x000000000140A000-memory.dmp
-
Size
2.3MB
-
MD5
b298b35c6cf4569c8743fcbde66feb46
-
SHA1
faff58982c224aea0543b9436b8fa3b4d3f47f2d
-
SHA256
4d6c5e78ae3e135dabfb036bacc73a5aa111de2abf27b41e960ff5dde3e89933
-
SHA512
7046153e8ca417d09a5958367ce99d23301b818c71856ad308baa22776c2c8069caf35a73b6b92393f020c30a8398585375a97bcc9a9d751a81c484ee94b85fe
-
SSDEEP
3072:MKuLpYaN3lshwbxnzv54BxopOax8JdATPlc35v+Q98XQSh:MKS+Qt4Bx+HSditEvzqD
Malware Config
Extracted
Family
stealc
Botnet
stok
C2
http://185.215.113.206
Attributes
-
url_path
/c4becf79229cb002.php
Signatures
-
Stealc family
Files
-
2688-2-0x00000000011C1000-0x000000000140A000-memory.dmp