General

  • Target

    1804-3-0x00000000002E0000-0x00000000007E2000-memory.dmp

  • Size

    5.0MB

  • MD5

    d3aa770875b5feb3837281ab9a8fd1df

  • SHA1

    dd5d1eac445b0fc47661cd06894a07d77e43d6f8

  • SHA256

    a9c9b52a4351023f44aa87149a8ecf1cb4c277e0e3b03fd3b75716c429205542

  • SHA512

    effe12546442bd7a248bf43d07ba938a1207dd7b0fde00e64f76adcddf1601e1a6dbfdf3ffa9c14ce595c126f1c046c95124d1c2353d4321ce79a3914b30d150

  • SSDEEP

    49152:HqR0aBWWOTWxWFbVUtJ6PmwoaGGFMdwRlpj4xDOOLDod6V:HqR/BvO6WFbVUtcPmfaGneRlRCKOLi

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

rave

C2

http://185.215.113.103

Attributes
  • url_path

    /e2b1563c6670f193.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1804-3-0x00000000002E0000-0x00000000007E2000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections