Overview

overview

10

Static

static

10

1088-48-0x...ry.dll

windows7-x64

10

1088-48-0x...ry.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1088-48-0x0000000003DB0000-0x0000000003FEB000-memory.dmp

  • Size

    2.2MB

  • MD5

    0425731a6ac979cfc6b3880c5623b898

  • SHA1

    786231131694860378436937a9b542886ccac0ed

  • SHA256

    9d183f4027eac902ef285e9fe67fa3587c99f94fbddaa79ba6a4d7a6f35dac3c

  • SHA512

    2eb624684ec1815013dd570c0a0440c1e0288f45a7a297a803d3e8653a8c0544c1dd924174d7effe11ebe88316d938408fb34bff5d43007b9fc0b9d31286c52a

  • SSDEEP

    3072:Ce0Uvkc2G9jSM8nOZ42nWr3YBPgUwYbpA9Wx5:CCvkrsjSBOjnGYBPgOpAQT

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://45.11.92.124

Attributes
  • url_path

    /982c183d8a9835c6.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1088-48-0x0000000003DB0000-0x0000000003FEB000-memory.dmp
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections