Overview

overview

10

Static

static

10

2608-2-0x0...ry.exe

windows7-x64

1

2608-2-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2608-2-0x0000000000930000-0x0000000000F08000-memory.dmp

  • Size

    5.8MB

  • MD5

    2278e5e5cfa63366ae8af3056fcc78c7

  • SHA1

    d61f79a178d76791cfaf14b6b31dc64b559e0574

  • SHA256

    6f02faefde43faaa4f87a11830842a3ee37319c2abd3a1b10fc9f7cabf20cefb

  • SHA512

    695c40ed47cfe45193cefabcbfb0be631dc176fc2c7a6ec15cb26d81528e151c44c4245609aeb0db3504e02aacca59cad3bc971e2bc4ec7e89ee97c72fe292ec

  • SSDEEP

    49152:PgFMLzkX59cWbdO5DGtGP9xlpe/9mi35G:PgeLoX591bdO5DGtc5Pi35

Score
10/10
defaultstealc

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://85.28.47.31

Attributes
  • url_path

    /5499d72b3a3e55be.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2608-2-0x0000000000930000-0x0000000000F08000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections