Overview

overview

10

Static

static

10

3188-62-0x...ry.exe

windows7-x64

10

3188-62-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3188-62-0x0000000000270000-0x0000000000774000-memory.dmp

  • Size

    5.0MB

  • MD5

    cb7fd631f3dedb673ec5c314d7208af2

  • SHA1

    aa23e2463fb709a8d88df84a03aa05a1e2a52f18

  • SHA256

    16cf4ec439425b0a969a965cd18946fe3bcb59551c7aa07c7f93eb86ed814a90

  • SHA512

    68916fb938ede75a494440069357a2d1c4203dc45e99029654a9e5c4a3f8d44c6804ca4777fbdbda59b0b4cb00b4e63570141c600674a8fbe855900daac5d578

  • SSDEEP

    49152:5wDDSihYA66Y2hiUgRBkiq5Sy+Z3FrggtMmg4:ADSihYA66Y2hiUgRB3q5SH3/tI4

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3188-62-0x0000000000270000-0x0000000000774000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections