General

  • Target

    2660-56-0x0000000000400000-0x0000000002435000-memory.dmp

  • Size

    32.2MB

  • MD5

    ced7aa2146936b864799fc254ff4baf3

  • SHA1

    06c106f179eefdb66e4ab6b349e3ee8a72a6669e

  • SHA256

    f0ca290a37bdab073602446cb85b0cb50d6a6bec8318cf468fde98b6ea78e185

  • SHA512

    ac772e6725e0754140b371dc2d345ede804da2e8656353126be9455116dcb25dece0ade6de386a81a2b075c81e035b329164b6db2ad28b6c7c597a03e3ff86c9

  • SSDEEP

    1536:Cusb7stfbqffbMny0eDEgU5ZOw9mbNFG7x6pt9Dvdp8R+jHb546+qUlE4SJrImJ5:3sbymMy0117esKhpV46+8rawdBqI3

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://adriaenclaeys.top/e9c345fc99a4e67e.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2660-56-0x0000000000400000-0x0000000002435000-memory.dmp
    .exe windows x86


    Headers

    Sections