Overview

overview

10

Static

static

10

1660-54-0x...ry.exe

windows7-x64

10

1660-54-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1660-54-0x0000000000400000-0x0000000000629000-memory.dmp

  • Size

    2.2MB

  • MD5

    97415ced8017107a36b229cb37ec4b6d

  • SHA1

    812e550bc6e8b32805b380a3c05124cae006f0d2

  • SHA256

    ac164608e5547e034c37142fc6adeafc73c043a1192de6be461736db21b31b4b

  • SHA512

    78eb43f81b2957cd6d140f56f3758de1b143bdfdf03c916e0cc4f14316fbf04fc4a1ecfc1acae95aecf7f164eca1fd1b361897097c3ffd4cf65dd3cb6e917b10

  • SSDEEP

    12288:5l6BuD3/yZ/vfU56TfXDL97zjad7OM4bZ:5

Score
10/10
stealerstealc

Malware Config

Extracted

Family

stealc

C2

http://45.12.239.76/dd38f9377d068411.php

Signatures

  • Detects Stealc stealer 1 IoCs
    stealer
  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1660-54-0x0000000000400000-0x0000000000629000-memory.dmp
    .exe windows x86


    Headers

    Sections