Overview

overview

10

Static

static

10

2756-620-0...ry.exe

windows7-x64

10

2756-620-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2756-620-0x0000000000400000-0x000000000085D000-memory.dmp

  • Size

    4.4MB

  • MD5

    0859b1677a53dc3779c47ecf9b691b8f

  • SHA1

    e4201a423352f0b55f7841442e8ed040d1622712

  • SHA256

    067ab2d3ab9157015886669a22b6ed902f7a91f3bcf01f381725cdc0f7362a0b

  • SHA512

    8899b3b5f8a9fca753ef67ff3ebf275b68b18136674675316bc04474638e0b127405706dec84aad06b24b361ee16a0fd643ee9fdb014740663b4a7622bf86b8d

  • SSDEEP

    3072:sg471w/yH6ooxFp/5Pr45eROQh0nsiggeRp:sg47O/M6ooxFp/5hZdge

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://185.172.128.79

Attributes
  • url_path

    /3886d2276f6914c4.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2756-620-0x0000000000400000-0x000000000085D000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections