Overview

overview

10

Static

static

10

2128-3-0x0...ry.exe

windows7-x64

10

2128-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2128-3-0x0000000000400000-0x000000000063B000-memory.dmp

  • Size

    2.2MB

  • MD5

    e4f3515fa4f01d911b4b2aba3997db8e

  • SHA1

    f8e761049d2b0dbff2c160e03f93dc9a6b01f12c

  • SHA256

    fd2e63237b2163bb6c2022e9495ca8adb6135213fdc16d547fe8c5f6394ac6df

  • SHA512

    e3944c271e28dba7468d11e1f733093e3d38697b90890179e9ab4fabd3ce65005e95b719a9215a8bc86c25772c8bdffc7eddc258b958838db6c3708670f14feb

  • SSDEEP

    3072:ivyLlG8KPgpJSG61doHN4NoQiUukOoyGbzyRy2GxhGJ+U:ivyhJryZoIohvkOpa+M2GzA+

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://185.172.128.150

Attributes
  • url_path

    /c698e1bc8a2f5e6d.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2128-3-0x0000000000400000-0x000000000063B000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections