Overview

overview

10

Static

static

10

3132-49-0x...ry.exe

windows7-x64

10

3132-49-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3132-49-0x0000000000870000-0x0000000000D6D000-memory.dmp

  • Size

    5.0MB

  • MD5

    0f4999a494b0557fbf3e231c24d85904

  • SHA1

    d5d8b82abe667c37c929166d22b8d79d6d59c241

  • SHA256

    ccfb8e5c0e84956f48532ca857bddabea683341edaf318c0efbbd8b6354a5cce

  • SHA512

    386c88f504412811689d19267e1ca2c63f5eda08f06d294883cdcab0498d0b8162069ba9db99390e10d7593184446c680b31fd5fa1c145b3cb4d77377855e19e

  • SSDEEP

    24576:9V7NAQUgymNUSQN/0tQn91B/X3tRkfsCXbNM6TKQJkvrorUtVNj3EXfbFV2f8f1R:rJrPQt02tILjD6jAGUp242A8UpyfIpk

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3132-49-0x0000000000870000-0x0000000000D6D000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections