Overview

overview

10

Static

static

10

2480-2-0x0...ry.exe

windows7-x64

10

2480-2-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2480-2-0x0000000000400000-0x000000000062D000-memory.dmp

  • Size

    2.2MB

  • MD5

    9af95c51bf77d6963ce80857cd115fbf

  • SHA1

    0bf6afdb8a3abf7712bc7aa36fe7e1806d36afba

  • SHA256

    693633d296f41f5db0fa8795376ead0a79c11b2322df1fc57c8ce4074b5772dd

  • SHA512

    8850e246f31b2bea073845ccf88748308dbeb5158abd492e2f8cc64f1a5faff73dcd154997fc71064a287bc4f859961726169758f67db66ef087131278777ea7

  • SSDEEP

    3072:RyMxBwQ5jXl9t6Swu6bCYf5z46CyOVfFUxghB8I:oMxSQ9jtpf4DHO/UxghG

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://jesseaustin.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2480-2-0x0000000000400000-0x000000000062D000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections