Overview

overview

10

Static

static

10

3052-2-0x0...ry.exe

windows7-x64

10

3052-2-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3052-2-0x0000000000400000-0x0000000002AC0000-memory.dmp

  • Size

    38.8MB

  • MD5

    0602d3b82345c3dcfb7e9860f560ed52

  • SHA1

    79401a49cee2e78ac2af4fd25ac13c7f52bdd329

  • SHA256

    6ecbfed9a375a6d8f0a8ddcb41884a4ef1a45193223a0b6eb041684e80570ab0

  • SHA512

    670dff16da4566e575e5cac61709c7134e63d94d0266ed394d186f8bafaed6c1d985a16103747ae26ce4e0760f66b42ea79b8ebc8e52e3317a2d86c9482ad7c2

  • SSDEEP

    3072:q/vgwFJ0mi2kWGreC41jBFHZuUxLsxrOUbR:q/vbPi2kW0eZjPHZzxLsvR

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://janmorath.icu

Attributes
  • url_path

    /40d570f44e84a454.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3052-2-0x0000000000400000-0x0000000002AC0000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections