General

  • Target

    4508-235-0x0000000000400000-0x0000000000629000-memory.dmp

  • Size

    2.2MB

  • MD5

    d7c1895fd4c3cdfe02f1354cee115697

  • SHA1

    bdab4d765baeeaa5fa8735023b2f2fa045c7a739

  • SHA256

    e34b79b6cd932238b84b9ce96082f77685f9266d67f19f7034a5789318c8ebd7

  • SHA512

    3df022bb0d3c12c169d9aa882f92c129f0c0cdf86c02a3e6570d464193d184472c7fc666edb39ae6e61ef88e30aed0992be918ff7dddbdfcafa3d750ec7d435d

  • SSDEEP

    24576:Xo+v03JpTD2Ch26+8ROqIK6BGbVGGy7dVI773t1M4r+0RbSHxTVwPrYIc:X

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://5.78.104.48/d130c39575999622.php

Signatures

  • Detects Stealc stealer 1 IoCs
  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4508-235-0x0000000000400000-0x0000000000629000-memory.dmp
    .exe windows x86


    Headers

    Sections