Overview

overview

10

Static

static

10

2108-2-0x0...ry.exe

windows7-x64

10

2108-2-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2108-2-0x0000000000400000-0x000000000062D000-memory.dmp

  • Size

    2.2MB

  • MD5

    4b0419a4565db4be5be7443feec32015

  • SHA1

    f75f0a92e4e4a6f2b0cf2caac6a42949946d3752

  • SHA256

    605aa8ae52aa10e9894d532d7a5365bb173d85862d5a5f6a81a2443fe5d8b6ab

  • SHA512

    b5fa05057f162a1f98b28e9be9258097016f2941e28def0d125472113a98551c02cb3d671a61a3e865fbc0608d4e51253df5b7ec094006102296955ade1257fc

  • SSDEEP

    3072:RyMxBwQ5jXl9t6Swu6bCYf5z46CyOVfF7xghB1I:oMxSQ9jtpf4DHO/7xgh/

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://jesseaustin.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2108-2-0x0000000000400000-0x000000000062D000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections