Overview

overview

10

Static

static

10

228-49-0x0...ry.exe

windows7-x64

10

228-49-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    228-49-0x0000000000060000-0x0000000000552000-memory.dmp

  • Size

    4.9MB

  • MD5

    f6623a0ef198e1c93e1466e1ad5098bc

  • SHA1

    86886144cc18235450cad0614a17b97a7f927f48

  • SHA256

    01b39c015903e1c4d16499954a6bf70c8f1c14eac062e24688618d4dd7221362

  • SHA512

    569c0ae764a52a794d3ef37144ba21554d9c110fa5b673c155d6daf8af94e6d5820d8306aad6430f0c3619155e452cbf8c8659fcfe0b90fe4ebc489f9c86adc4

  • SSDEEP

    49152:XNUL3ekEYseAV4pWCrFvYiuV71glQM/N3G:6LOkj6VJCrFrm715A3

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 228-49-0x0000000000060000-0x0000000000552000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections