Overview

overview

10

Static

static

10

2304-2-0x0...ry.exe

windows7-x64

10

2304-2-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2304-2-0x0000000000400000-0x0000000000718000-memory.dmp

  • Size

    3.1MB

  • MD5

    66f0101949772f9d6733685313537307

  • SHA1

    d365ac8fc91e0a5b6287500b9a73d72b24c35fc1

  • SHA256

    69178a54904e7a704ad2f2c0b703088d56066c9b35e5c4cd03bf4602a71d1c8f

  • SHA512

    877513cb00e05f4aedb644d905d003558f4d41bf565e44272191f36ba63d28c69fcdf2987b40b6c3f839596e7f292b0a8c088a0627a71e6a9d817d862910b44a

  • SSDEEP

    3072:YixkPwbpTK8Q5Uzf4JElJvIT4DNqOp5cCXjo+eRqQOg87dB:fxmwbJKAzAElJA8DNqOp5cCs+04g8Z

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://bryanzachary.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2304-2-0x0000000000400000-0x0000000000718000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections