General

  • Target

    1040-142-0x0000000028F80000-0x00000000291A8000-memory.dmp

  • Size

    2.2MB

  • MD5

    a4df3bb65025d0cb5bf83e1c4d1a9e07

  • SHA1

    1342f592baefbb8e5098e679f187ef4eeae9ecf1

  • SHA256

    e6ec523f010c2363a0b28dcaf9b9250151e05cf804c796b0f5484a070b1bcc05

  • SHA512

    1382fc4e4fb1b5c17ccfb6f66b3fc5bc10c325f86e84b0f65d39f2f85290706bd9d6bd8b290ec5ff7c136951088cc974f7aef6e4c9dc956e9e635a0816bc5503

  • SSDEEP

    24576:eLECwVzkpAU6JrOHRnrA9/bL1U5mObVbco2JcyIIq5LeNxMq36MGc5OyP:e

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://79.137.206.15/385785d59336a866.php

Signatures

  • Detects Stealc stealer 1 IoCs
  • Stealc family

Files

  • 1040-142-0x0000000028F80000-0x00000000291A8000-memory.dmp
    .dll windows x86


    Headers

    Sections