General

  • Target

    2760-2-0x0000000000C70000-0x0000000001849000-memory.dmp

  • Size

    11.8MB

  • MD5

    5abad9db7a70c2932c14a50834cb38b4

  • SHA1

    d7b09d9606776fd56a98fb938465504df11542f3

  • SHA256

    d801f742c6208e630512c298f5e57eacb9cb17be9cc093545dc2f28ef91bc52b

  • SHA512

    37393d5cbdcf15be7ae322c2a006108ddb0215eb5e01bf4a8b9d949bd5632e469ff9c6c65b76ff8c3b922a477303699857ebd609bba4e5fc0d2a6068ad8b3a7a

  • SSDEEP

    98304:rCTY3MK8j+YJ30UHvggYGsWTnLNuCBs9lGi13dWp8MBxNsq+bBny8qDnm9KTpr:uTkebXYGTnBGlGUMB1+1y8qbtTp

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://85.28.47.4

Attributes
  • url_path

    /920475a59bac849d.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2760-2-0x0000000000C70000-0x0000000001849000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections