General

  • Target

    240-990-0x0000000000400000-0x000000000062A000-memory.dmp

  • Size

    2.2MB

  • MD5

    b9872a3cfd366791927e3a43e2b7d8ca

  • SHA1

    6efc4b8ea0738f9f6321d20a1995aeeb616e58a8

  • SHA256

    c049bd67063b044cd7aea871aacfe1b392576534dd4d4f0abe4354904f6a3ec6

  • SHA512

    d78af967aaf0d6fa862e07bbc1e740c3f3c3003a19adecb3e958abdc1f09e8aa330c941b3b51912045e5f48e83410aa5bc9460666bb475a5447abafb539b4b67

  • SSDEEP

    1536:OhXH9fdT222BkXXSMLO+xAV7QFKZ6rarvhGd1RiYpDWyk2k9jrY+/pk:OJdfd222+nSeAVz6S5QiYAyUxYcp

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://5.42.64.6/3d980df4aa7e4a91.php

Signatures

  • Detects Stealc stealer 1 IoCs
  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 240-990-0x0000000000400000-0x000000000062A000-memory.dmp
    .exe windows x86


    Headers

    Sections