Overview

overview

10

Static

static

10

1172-47-0x...ry.exe

windows7-x64

10

1172-47-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1172-47-0x0000000000500000-0x0000000000A12000-memory.dmp

  • Size

    5.1MB

  • MD5

    a9b290cca8ba88e6f6430f7f0ba27ce7

  • SHA1

    5d1356f36ff681b03dd2347d3daef3ac98592044

  • SHA256

    f56dca22831d1451e9dd1b9a7736e230929564c7dabac8115ebef91625e3c74b

  • SHA512

    4b6a78e19b811808f3f9429f33732cad447d41a54e2253e9127104ba14ebef49f6b256975c313f36b0c5f61e93522143358d5d39501654c2ee7bcd5d43979a31

  • SSDEEP

    98304:gOrmI6FP4LgJl+y9QV6/NqYMJ6rZPAuj:Wb9QQFqYvZPAuj

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1172-47-0x0000000000500000-0x0000000000A12000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections