Overview

overview

10

Static

static

10

1160-47-0x...ry.exe

windows7-x64

10

1160-47-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1160-47-0x0000000000BE0000-0x00000000010DA000-memory.dmp

  • Size

    5.0MB

  • MD5

    b68ecbe2f0641b3e34215f3f1377b791

  • SHA1

    6b8e5f35a1cfd5e6c311c8bb6e1c2640cf21d7c1

  • SHA256

    a86219bdd3aa5189d4b6b25e74bd1a1589b01455d0ef4e98623c776ee75220c6

  • SHA512

    5fd946e30485bea79f2adf67418289508aa50b9a7ed892ae77eb0345766c4bfd85d92f7bc441fafd52298a22765b7cafd95497d03be4c7dece9bfd0f11aa889f

  • SSDEEP

    49152:uCOUVtKKnnbMjTid/4UXvPqwmFxqbV2cQJIUzXvo/PbY6:qUzKKnbWTid/4Ulexq52pzXA/Pbd

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1160-47-0x0000000000BE0000-0x00000000010DA000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections