Overview

overview

10

Static

static

10

1932-0-0x0...ry.exe

windows7-x64

10

1932-0-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1932-0-0x0000000001FC0000-0x00000000021ED000-memory.dmp

  • Size

    2.2MB

  • MD5

    fc047481fbe2a59d703d0a2af8f9bcab

  • SHA1

    477efbb1eb18ee99065238cee9c08314234761e0

  • SHA256

    45d010066028caf3f0b3105905393bfb90b6d10f757585200b0b9ca611e6d1d7

  • SHA512

    c33b4d21abb37702be09bb07f692d8494b1d978153d9e6572ce5b8824f4ae846c2987b0050f0b72bb668bf25fc816f7507eb18768134b9712a1e68227cb3a735

  • SSDEEP

    3072:hGfWtgHjllU7OzwpQtlpgp5W4G25wxDcNrhI:kfWtgDAOEpqah9h

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://91.103.253.2

Attributes
  • url_path

    /f12a1b41d18876b0.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1932-0-0x0000000001FC0000-0x00000000021ED000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections