Overview

overview

10

Static

static

10

2524-35-0x...ry.exe

windows7-x64

1

2524-35-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2524-35-0x0000000000400000-0x000000000063B000-memory.dmp

  • Size

    2.2MB

  • MD5

    cbb36e02e0fa3c3309994021f57c1909

  • SHA1

    82924863a6ab2f575642f288ae90cf0149f50788

  • SHA256

    25893e1680f5eae77fe8bc80d7261cbb183eae33df26f7bef4b1e7abd42f6cc8

  • SHA512

    5ffbc46b44e721a0228ba8e85585dda8826c534a5a5a450d08880736224090122701857a9be58677acbbf0d44c2e34cacf01056a2930778d1ab84aff95f60334

  • SSDEEP

    3072:wvMLlG8KPgpJSG61doHN4NoQiUukOoy3EakzVGJW6U:wvMhJryZoIohvkOpFQVAW6

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://185.172.128.145

Attributes
  • url_path

    /3cd2b41cbde8fc9c.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2524-35-0x0000000000400000-0x000000000063B000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections