Overview

overview

10

Static

static

10

1996-56-0x...ry.exe

windows7-x64

10

1996-56-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1996-56-0x0000000000CD0000-0x00000000018C2000-memory.dmp

  • Size

    11.9MB

  • MD5

    ecac035916af509d2ab699e5a83e7dfd

  • SHA1

    52ea34936473ed5abd3b23bd32df51144607e672

  • SHA256

    baf1f319bdb3da1b15317d9253c8f4124175df88152b06f982df92501af61185

  • SHA512

    230b6df778cf0fb856efed4d03e77dbce0887d912709ec2786e327aeac53531ef706b6e00a212e36b86121dda0a221d1871a9f7c3db534ab2bb6b9d0b4c6b2a5

  • SSDEEP

    98304:IDUO7ngOwb0Xg5Kx8vcdoLfdkqDdcX8tYfnu4EFz92CMF845C8:KUOEpf5Kx8WGdkedcMtEdEFQCSBo8

Score
10/10
defaultstealc

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://85.28.47.4

Attributes
  • url_path

    /920475a59bac849d.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1996-56-0x0000000000CD0000-0x00000000018C2000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections