General

  • Target

    2244-3-0x0000000000400000-0x0000000000711000-memory.dmp

  • Size

    3.1MB

  • MD5

    fd4d62023e3d27526cb971527e541056

  • SHA1

    da3524216fb885f5498c60695318e82f4a80fa7b

  • SHA256

    adc8061afececcdee4fa53d2d84d915d408179b693f8c61fd6ec2b1b65e3de7d

  • SHA512

    6a2d8cbcadd06bb8d214f8d3d43641ebe5dd3662828c11cfadf1ca582867a3d58998180eff351dfd3bd98b8a3581550ae7b1d7ff5894d9a3b6dc6d3205876365

  • SSDEEP

    3072:YixkPwbpTK8Q5Uzf4JElJvIT4NNqOp5cCXjoIRq7:fxmwbJKAzAElJA8NNqOp5cCsm

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://bryanzachary.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2244-3-0x0000000000400000-0x0000000000711000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections