Overview

overview

10

Static

static

10

2960-3-0x0...ry.exe

windows7-x64

10

2960-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2960-3-0x0000000000850000-0x0000000000D35000-memory.dmp

  • Size

    4.9MB

  • MD5

    e9a27a7baf7e3da516f468e4108acf7f

  • SHA1

    6b0bc694f29454520eba47b6019a912bb5a95177

  • SHA256

    f49bd678e63d437842128cbb5af6d3fda04a0005ce61c0b08d28aec92933014b

  • SHA512

    96f9fe01059dfa5a5e5ee669527d4931f067ac31904ed6769a2734b34d6061d89877740e56f461dc51194b0c5a934ac56326bacd8483285337bcb9cadffbbe1d

  • SSDEEP

    24576:GhtI7Qu3NoStPjAiur1Yo5ZpAOg3RBtsxj7MxVrdxGycC9HWJX1JKkYzn6sX4CLn:0WsyShruo5wej7Mnr2IgC6hj/qL2sj6

Score
10/10
ravestealc

Malware Config

Extracted

Family

stealc

Botnet

rave

C2

http://185.215.113.103

Attributes
  • url_path

    /e2b1563c6670f193.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2960-3-0x0000000000850000-0x0000000000D35000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections