Overview

overview

10

Static

static

10

1960-2-0x0...ry.exe

windows7-x64

10

1960-2-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1960-2-0x0000000000400000-0x000000000062D000-memory.dmp

  • Size

    2.2MB

  • MD5

    82b5354aef65dfe01c82f0ba1f532a03

  • SHA1

    350feb202154ccef0d2933668c2044e5a1bb08e2

  • SHA256

    c0af89da7e99a50283f1a4d5c1356ad674d614b309f7bef5f54d8acc6e2a82cd

  • SHA512

    428288188812de24b40d4f24f1f0627fa499339e3ff2b2bc35da7e6b3b25ef9607c101edd7c4655ba21fa635c69c66b2839cb8bb155bfbf696b33dd952b48f70

  • SSDEEP

    3072:KwZx7tPwbpTK8Q5Uzf4JElJvIT4nZe7Rq:bZ1xwbJKAzAElJA8Yt

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://171.22.28.221

Attributes
  • url_path

    /5c06c05b7b34e8e6.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1960-2-0x0000000000400000-0x000000000062D000-memory.dmp
    .exe windows x86


    Headers

    Sections