Overview

overview

10

Static

static

10

1212-100-0...ry.exe

windows7-x64

1

1212-100-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1212-100-0x0000000000400000-0x000000000068D000-memory.dmp

  • Size

    2.6MB

  • MD5

    91d57ff15069ab5272c9f1d989b2349b

  • SHA1

    0f946f46e49aabccac4dc5210ce1e31fa2b8862c

  • SHA256

    013d3080bcb9649c5dc0afeebd4865b1266e8cba2f5c364bead879623bdd14d3

  • SHA512

    b2c035ac2cd54878f391882a2b8c3b4b3bd8d975775c7bcca98fb43b0f90d6b064b44efa1399444752d7843e7b6d3ffd3a0ebfcd2b956b803a2512ea81871920

  • SSDEEP

    24576:pCa+vn2i04HvjhE5/yionOjzvGHbEqKajh+r5m1pB4XxeGtf1YF7+vl/xcP/cs7W:p6

Score
10/10
stealerstealc

Malware Config

Extracted

Family

stealc

C2

http://ronaldlitt.top/25d4fc7fb0cb6b78.php

Signatures

  • Detects Stealc stealer 1 IoCs
    stealer
  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1212-100-0x0000000000400000-0x000000000068D000-memory.dmp
    .exe windows x86


    Headers

    Sections