Overview

overview

10

Static

static

10

2788-2-0x0...ry.exe

windows7-x64

3

2788-2-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2788-2-0x0000000000400000-0x000000000062D000-memory.dmp

  • Size

    2.2MB

  • MD5

    b1051aae8454b29a292f43048ebeda5f

  • SHA1

    ad0a6c7e1de082f90183d46ea93b64d6e4e19c46

  • SHA256

    de53ac059ac6320db24642753bc866160af87a5f5b7e4b9ddc541858f8bc4643

  • SHA512

    1c384e586cc6a87d2ec173189637f744fb7c1bb5e6550870d184f645267b58bba04b848bf8484384a868ce50ea89518b30223ba881d1d023687f154438bef0f6

  • SSDEEP

    3072:kiMrDR6PwbpTK8Q5Uzf4JElJvIT4uYCRq:bMrFgwbJKAzAElJA8up

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://christopherant�nio.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2788-2-0x0000000000400000-0x000000000062D000-memory.dmp
    .exe windows x86


    Headers

    Sections