Overview

overview

10

Static

static

10

2224-2-0x0...ry.exe

windows7-x64

10

2224-2-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2224-2-0x0000000000400000-0x000000000062D000-memory.dmp

  • Size

    2.2MB

  • MD5

    024a76c46588d9d7ef350d1ba18f27fc

  • SHA1

    cb20db1863945875195ff26482bf27c1d8966d0d

  • SHA256

    5ae0ee25a9028112dffef3e6d09807fb0787dd4c45564d42ba0411a462b9a6e7

  • SHA512

    c749418feb3cc2787a7808ef534b797f0dc820681c7c49b82d9dc908c389b67df7e6750b6328a11a5af5b5fae6e1b875e1d0c4fccfd3f78693502b3521e8212b

  • SSDEEP

    3072:KwZx7tPwbpTK8Q5Uzf4JElJvIT4sZeiRq:bZ1xwbJKAzAElJA8PA

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://171.22.28.221

Attributes
  • url_path

    /5c06c05b7b34e8e6.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2224-2-0x0000000000400000-0x000000000062D000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections