Overview

overview

10

Static

static

10

440-20-0x0...ry.exe

windows7-x64

10

440-20-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    440-20-0x0000000000400000-0x0000000002B5C000-memory.dmp

  • Size

    39.4MB

  • MD5

    fcaec8517ca1e1c74c0a05388a7ccf7e

  • SHA1

    d0beb9c2be6ca264a4630fae870681a7bb5f21fb

  • SHA256

    cd1a0f61e388327d8e27607671919cd7f84620058f2cc927e2f6cf3f1388f95a

  • SHA512

    32408ed3e3e314c62e9e9335f99da5e1704a85a755483358dd228ae67c8ea5949541302c342f395bcd61bd427e21deef87391a3f85e31b9322fa370ecba3b18c

  • SSDEEP

    3072:yvMLlG8KPgpJSG61doHN4NoQiUukOoyXH4kLNBGJ/UZHeaX:yvMhJryZoIohvkOpfxBA/GHr

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://185.172.128.209

Attributes
  • url_path

    /3cd2b41cbde8fc9c.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 440-20-0x0000000000400000-0x0000000002B5C000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections