Overview

overview

10

Static

static

10

2960-6-0x0...ry.exe

windows7-x64

10

2960-6-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2960-6-0x0000000000400000-0x000000000062D000-memory.dmp

  • Size

    2.2MB

  • MD5

    10f9d3d2673f1f71b566b8ba63a3b741

  • SHA1

    ff7fb77131016a2df99947e49146e55ff78afe7a

  • SHA256

    237719dcc8668878df4732fb65e2afc9120750176103e1c44189712a6dec0e79

  • SHA512

    4f9321b924a85e2a194ef5aa7dc9ac439a187a462ab2b6c8bd3bce461f49ae68170d56af39f1260a66c71e83ff80a92885fbe9e7abf3b6f441c871288d52bc0a

  • SSDEEP

    3072:q+QZx7YwQ5jXl9t6Swu6bCYf5z46CyOVfFx:lQZ1/Q9jtpf4DHO/

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://208.91.189.189

Attributes
  • url_path

    /8882f656e94df309.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2960-6-0x0000000000400000-0x000000000062D000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections