Overview

overview

10

Static

static

10

3000-6-0x0...ry.exe

windows7-x64

10

3000-6-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3000-6-0x00000000001F0000-0x000000000042B000-memory.dmp

  • Size

    2.2MB

  • MD5

    6e2bb2229f721f8e48a20cb9d60c1cfd

  • SHA1

    f1ac0a9217e6ed5332285b77d659176bbfb0bf80

  • SHA256

    21f3fd74f0a13575c35753bab3b8852c78a349cfe08935aff1027b46122e82b2

  • SHA512

    5e0dc5e906ce46e2d46d4dc0563a0533b4b1a9b669b478ba98d3437504c43f64e087171852eceebf7d56ffd2385e3954d845b874047faba05c620ca98f650d45

  • SSDEEP

    3072:lzkjSps8P54hr1tg427uvZZh9dcGMhx1b4bYUXyRU:lOsa1K7OJMhxdjUCR

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://89.105.201.188

Attributes
  • url_path

    /129edec4272dc2c8.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3000-6-0x00000000001F0000-0x000000000042B000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections