Overview

overview

10

Static

static

10

2240-847-0...ry.exe

windows7-x64

10

2240-847-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2240-847-0x0000000000400000-0x000000000062E000-memory.dmp

  • Size

    2.2MB

  • MD5

    343d239879a7ad14f5c082d8e4eb5ca6

  • SHA1

    60f432807bc270f89a900397d01d495c38d5204d

  • SHA256

    f14bb3ee0077ddf45bcb650051dc3cb4a353dea04d3f8509dc16a398fce03833

  • SHA512

    9406b1a106e5e1fb1cb21c370d4e186bd6976702cd1cd35baaeb4cf95803eb0bb987070d9e4d518fb912d8a16e0d807d2695fb070e680ee728382dc95bca514d

  • SSDEEP

    24576:saSIFpoLdcp+R0RP/XxeLes9zCopnT0h71Nr88w/5SzwhPM+8rO5W+zkHqKiIsK2:7

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://185.172.128.79

Attributes
  • url_path

    /3886d2276f6914c4.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2240-847-0x0000000000400000-0x000000000062E000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections