Overview

overview

10

Static

static

10

2012-132-0...ry.dll

windows7-x64

1

2012-132-0...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2012-132-0x0000000029010000-0x0000000029239000-memory.dmp

  • Size

    2.2MB

  • MD5

    dfd7b05fc62ea7472d59b49d2b9de4b4

  • SHA1

    62f16a707407fbaa47c0ff279dadaadd585edcb5

  • SHA256

    6a03ed29119304a16fbca6e4058496ced7fedc84011e1647d40c8af5db1f4577

  • SHA512

    7e14e99c311bc99f5c7b6d1112a8792453b755b3fc7a0bf430fc8b595dd3656b4259b4ecbe1baaac579884f2998eb6762c86844a76528c4be4ee51e19f7e65ab

  • SSDEEP

    24576:eu6/6xK9QucJFPAlMgsBs7kcs18qNE6Viy2vofEqB8O/G4lM+Ua78Ytn:eu6

Score
10/10
stealerstealc

Malware Config

Extracted

Family

stealc

C2

http://128.140.91.217/9a54e32a8b27f71c.php

Signatures

  • Detects Stealc stealer 1 IoCs
    stealer
  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2012-132-0x0000000029010000-0x0000000029239000-memory.dmp
    .dll windows x86


    Headers

    Sections