Overview

overview

10

Static

static

10

1504-63-0x...ry.exe

windows7-x64

10

1504-63-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1504-63-0x0000000000400000-0x0000000000629000-memory.dmp

  • Size

    2.2MB

  • MD5

    ee7cb2f4fd8e88a171259b17084d5638

  • SHA1

    d51c931c70f5079818a0a2d4235cc75d6de03986

  • SHA256

    2c88640b8223b906fd2e965368728da19a61f1e09c94fa997839895f548938ba

  • SHA512

    5062531db49e50bd97fc3601de1f8c628da19c6f34ff6d20a32f94a94b1e56bd31927332c0fc0f1fdd4131b173d9f8f3bb88ce2bfba72a3b74c7a75d6eea8641

  • SSDEEP

    12288:ul6BuD3/yZ/vfU56TfXDL97zjad7OM4bZ:u

Score
10/10
stealerstealc

Malware Config

Extracted

Family

stealc

C2

http://79.137.206.248/838d8918a5621059.php

Signatures

  • Detects Stealc stealer 1 IoCs
    stealer
  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1504-63-0x0000000000400000-0x0000000000629000-memory.dmp
    .exe windows x86


    Headers

    Sections