Overview

overview

10

Static

static

10

1972-44-0x...ry.exe

windows7-x64

10

1972-44-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1972-44-0x0000000000AA0000-0x0000000000F83000-memory.dmp

  • Size

    4.9MB

  • MD5

    e269b02fbefa4d17db5a4d9f9c1e4909

  • SHA1

    6eb41c61f9bf48493797d1cc391d5c70045db681

  • SHA256

    bc07c8843a97fa2062ebe6522f6d27483c20049af284df5ef211fa4e3287b84a

  • SHA512

    db264339f03635c60b36a0b5cb54eae6f7b4ffc28fdd866bf6ccd0b94dc9d7b9bc887188bef8697a445b06c6834584ffc81138833f004016af9912742e2a6920

  • SSDEEP

    24576:Cyqv22EtXwiyvbtHI5YZfC7O9hORNs1AuaFbjSicRrIfW3cPVPSkfFxjKCxVwTXg:sgYHI5YZq6o31uUZ4EoAkwcW

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1972-44-0x0000000000AA0000-0x0000000000F83000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections