Overview

overview

10

Static

static

10

2552-1-0x0...ry.exe

windows7-x64

10

2552-1-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2552-1-0x0000000001F80000-0x00000000021AD000-memory.dmp

  • Size

    2.2MB

  • MD5

    bed83f3379e2ecfe3b6ad27d50602efc

  • SHA1

    38dfee63726965f0fecb8bcd2793994aa41dd783

  • SHA256

    d39561f0bf4fed5d37129de2dc18fb8f83eac436745f2af4b9ebbf01cfb3dd9f

  • SHA512

    e19a63168bb089a612481a8304f6cef8becf5feafd16c442bbe4534ba4a28f95c5aed4a42042f52550f1cd90751c9b73250d458ffdf7274899269b7ed689c668

  • SSDEEP

    3072:5vXmNHlq5xMaxmn4Pii08Z5wRHzucVvRq:JWNFqn3mMD5mxp

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://85.209.11.51

Attributes
  • url_path

    /fefb4a458e1dc58b.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2552-1-0x0000000001F80000-0x00000000021AD000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections