General

  • Target

    2244-2-0x0000000000400000-0x000000000062D000-memory.dmp

  • Size

    2.2MB

  • MD5

    a5a6f090a1852efe411c0310c6a5434c

  • SHA1

    4663cce1167e841c861a558da354333dda59b7c3

  • SHA256

    876efc8c3d8657801cc7d0ddf55772bd15f581723df6d4d75b775577dc31f246

  • SHA512

    45be97c3159c2aba38a77f83e45367dd2359ccca6255bf137ab3b03ca696507fcc2e7720a890b00c6080ee2c746ce5852cb6b6259c6b36fb17055fe9074a7092

  • SSDEEP

    3072:kiMrDR6PwbpTK8Q5Uzf4JElJvIT4bYIRq:bMrFgwbJKAzAElJA8bf

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://christopherant�nio.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2244-2-0x0000000000400000-0x000000000062D000-memory.dmp
    .exe windows x86


    Headers

    Sections