Overview

overview

10

Static

static

10

916-132-0x...ry.dll

windows7-x64

1

916-132-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    916-132-0x0000000029010000-0x0000000029239000-memory.dmp

  • Size

    2.2MB

  • MD5

    5b8f58d1f7fefb3664e32b8598a5e45f

  • SHA1

    269217b05192860de1ea69d1fae064c0ebbcca51

  • SHA256

    2abecba7d7044557efc92d5ecd4b328453a254ac508400d33bb7f1cc2987d72e

  • SHA512

    608129e8d0d6619b42b2ca8a91c9e4398d13cb25444efd1997329334831f732722a0676621d4f51871d3bdbf2f107f7e7b97293bcb06168c1beb17ffe786b039

  • SSDEEP

    24576:eu86BqKw18plvgFsAMhMbEpMscqNE6Viy2PIfE9Bnu/GYlse537cYN:eu

Score
10/10
stealerstealc

Malware Config

Extracted

Family

stealc

C2

http://128.140.91.217/9a54e32a8b27f71c.php

Signatures

  • Detects Stealc stealer 1 IoCs
    stealer
  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 916-132-0x0000000029010000-0x0000000029239000-memory.dmp
    .dll windows x86


    Headers

    Sections