Overview

overview

10

Static

static

10

2648-22-0x...ry.exe

windows7-x64

10

2648-22-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2648-22-0x0000000000400000-0x000000000062D000-memory.dmp

  • Size

    2.2MB

  • MD5

    f5fc93fe498197a8ba05626471446c98

  • SHA1

    23f0b174261497d4d8a0f40f1ae185fe4baacd38

  • SHA256

    ce1248cd6cacd75825d2fbbce22467eb8fbe35641f73ad9b16364bdf3eb7c995

  • SHA512

    df3507c8e4c3808dd8f4ddb2e63d04e898623b8c14d0c736b3b54f03c246b90e6bd7a230c914079171ce356ab12bdf3df172ce665fd5e3d0771aaea79691d1b7

  • SSDEEP

    3072:uWY/xwQ5jXl9t6Swu6bCYf5z46CyOVfFl3575:pY/iQ9jtpf4DHO/l3575

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://217.196.96.138

Attributes
  • url_path

    /a737400ffa5db996.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2648-22-0x0000000000400000-0x000000000062D000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections