Overview

overview

10

Static

static

10

1972-3-0x0...ry.exe

windows7-x64

10

1972-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1972-3-0x0000000000400000-0x000000000062E000-memory.dmp

  • Size

    2.2MB

  • MD5

    120d3947e9f036c0aa9668a3e11276c8

  • SHA1

    404019613a47c4d54367ab5a9f4a4a334507942b

  • SHA256

    2724406b769f27b0d34c6e7040d7dbd1aa4a2b85defaf530e3cb918937b472b6

  • SHA512

    16a82049d39d7af59ac2656754da0952c423351fee0a5cc10854682e24db0aafeedda43602d99285d52c4f97d21435f43ec32565cf3b82097c3fb261e2f6aff6

  • SSDEEP

    1536:bvgeMVDDKpQw/yzQO6PQB6oy5wIay/AOSxGPN0n6p/r2j8YDqavs46msTvmiOWRQ:rgeMFVw/yH6ooxFp/5Pr45eROQhqD

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://5.42.66.58

Attributes
  • url_path

    /3886d2276f6914c4.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1972-3-0x0000000000400000-0x000000000062E000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections