Overview

overview

10

Static

static

10

1428-1113-...ry.exe

windows7-x64

10

1428-1113-...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1428-1113-0x0000000000400000-0x0000000000629000-memory.dmp

  • Size

    2.2MB

  • MD5

    c6ff372a191cd3ceecbefe95144639a8

  • SHA1

    cb8846daa39ef6fdf11a7969659c3f108aa1e8fe

  • SHA256

    d985a81e5db121bd7cd858d749aa6b8c2d997de99d80d43d6301a7a3fbaa633e

  • SHA512

    7d92c696839480079ba93ab66ead3d4ae7c604f5bfa46b9bab1c0e3145614aff0e373b8993a432a5a68a7f7a387ea6cfe044e555f242f19231dd2134fb11eda5

  • SSDEEP

    12288:cFSwuD3/yZ/vfU56TfXDL97zjad7OM4bZTJ:c3J

Score
10/10
stealerstealc

Malware Config

Extracted

Family

stealc

C2

http://rewe-coupouns.com/693386d591752f22.php

Signatures

  • Detects Stealc stealer 1 IoCs
    stealer
  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1428-1113-0x0000000000400000-0x0000000000629000-memory.dmp
    .exe windows x86


    Headers

    Sections