Overview

overview

10

Static

static

10

1100-2-0x0...ry.exe

windows7-x64

10

1100-2-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1100-2-0x0000000010000000-0x000000001022D000-memory.dmp

  • Size

    2.2MB

  • MD5

    5c647cf90930f922c8ad1b9227ecdb18

  • SHA1

    bb2fc02954d1ed3354075137ab4483c389fabc4b

  • SHA256

    a416843f24198d9215ddc80778311f02ac93821f6b9e0f47ac6b09c3242d33c9

  • SHA512

    e899629e049af30eb648fbe6dda80bc8f237afb028900e4312672936b41bc844889f5e7380d2f0cb5a4ce9fc1c01d22f9ed6b7c4a4819259f2a7b8b4a1b22b94

  • SSDEEP

    1536:yVKECInJMPyh2NgSxktJ+lt96JfSzEL757i4Tj5+WNkZtc4NgmTRYaVL7q/Io:CKE1EgSzlt96JMg97i4f5T4NltV8I

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://tetromask.site

Attributes
  • url_path

    /b5c586aec2e1004c.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1100-2-0x0000000010000000-0x000000001022D000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections