Overview

overview

10

Static

static

10

2588-1-0x0...ry.exe

windows7-x64

10

2588-1-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2588-1-0x0000000001EA0000-0x00000000020CD000-memory.dmp

  • Size

    2.2MB

  • MD5

    0f989aa9198492a82a73f564c1394b7e

  • SHA1

    7a4efa158d862f6895c290a371ba0fbb7cc5161d

  • SHA256

    0e3062f5213b63018a563c7878cee2bbe0489294fd129d62c108767102cd690e

  • SHA512

    1ab55974b756ef078985fad68ec915917693b96362a0802a369a272d833ae7af1239b863dfb747c7f348af9e9973bf1ec986195b92d23ddace179c853d89ea2f

  • SSDEEP

    1536:+8boI/XDeFChehl4DkI4JUsmRrDTsj9fZp8HLJyfrZyL4lda1wD3Tw+sQ5r+T1aa:+DWhehmcKR4j9b8F4ldf3TjjggRq

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://185.244.48.221

Attributes
  • url_path

    /753e391766d6b25f.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2588-1-0x0000000001EA0000-0x00000000020CD000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections