Overview

overview

10

Static

static

10

3048-55-0x...ry.exe

windows7-x64

10

3048-55-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3048-55-0x0000000000400000-0x0000000000629000-memory.dmp

  • Size

    2.2MB

  • MD5

    7ce5c50bc6cc27b9a31b46591f083918

  • SHA1

    0e7159394dbca52ed1733a18da2fb06758aad064

  • SHA256

    48423ebd1a2f9ecfcc297a98307f42abcb9d45283cbc39f26c1129d37c84a4a0

  • SHA512

    48c0704e8bc95b731f97493bed64be0bdcd8077e6052bd74c2626d10482b1b08790fd82bdc3738cfdac82f649028d7f64869d894924088ba0b0d5cf6f3a73830

  • SSDEEP

    12288:+86BuD3/yZ/vfU56TfXDL97zjad7OM4bZK:+g

Score
10/10
stealerstealc

Malware Config

Extracted

Family

stealc

C2

http://212.118�43.207/b5e0972e09e482c4.php

Signatures

  • Detects Stealc stealer 1 IoCs
    stealer
  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3048-55-0x0000000000400000-0x0000000000629000-memory.dmp
    .exe windows x86


    Headers

    Sections