Overview

overview

10

Static

static

10

1600-659-0...ry.exe

windows7-x64

1600-659-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1600-659-0x0000000000A60000-0x000000000117D000-memory.dmp

  • Size

    7.1MB

  • MD5

    59e7c92a2cc1e8c3ee3c128b9cfbc92e

  • SHA1

    20dee1a9d6768d3cde98630b43c23b660a81ba0f

  • SHA256

    ef319a4db8564f117dbd62f08921e372bfa1ae46e7a78a160b577011bcf62cef

  • SHA512

    90ec28031ecfc41b58cf0f9db8480b9e44bf7de6efa19d4b3555d628658b5a8d192b38f6a8ffe9d55848c2b5e51d4e0d51e12e5fe749f003e43433666c783708

  • SSDEEP

    98304:M52dC2P656UY0sEKubggX43c4GAaXyB6WWdT5:Q2UbKx8gq43HEdt

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://bakbakbak.info

Attributes
  • url_path

    /09e4d23b10828340.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1600-659-0x0000000000A60000-0x000000000117D000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections