Overview

overview

10

Static

static

10

644-50-0x0...ry.exe

windows7-x64

10

644-50-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    644-50-0x0000000000C30000-0x0000000001129000-memory.dmp

  • Size

    5.0MB

  • MD5

    61b97254558eef2cedba0831e2232601

  • SHA1

    6c9cf95f6e78ebfdb280f1a3ec45528470760513

  • SHA256

    0eabdbed31823aa474e6622eb0558f3b9b07410356513b695ba50cda5fae4de3

  • SHA512

    a041b5fac5489d726aafb4c6d7d53ea8c58916c5e83a0bb0ed4851ca4243c65168b1443fd23d3961df2b1e4da6c6f7013663cab73f9edf679ac5e5d44c990765

  • SSDEEP

    49152:Hbs0UWct6hW8hk0b2iw0vbTugDyiybogix:7s0UWct6hW8hnb2iw0vbTu4yiaogK

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 644-50-0x0000000000C30000-0x0000000001129000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections