Overview

overview

10

Static

static

10

2468-3-0x0...ry.exe

windows7-x64

10

2468-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2468-3-0x0000000001250000-0x00000000018E7000-memory.dmp

  • Size

    6.6MB

  • MD5

    e27fb0f02aa2b38c81506486c92d2b55

  • SHA1

    4b263a4ba6f531e79e9aaafab80eaccd3c7afb56

  • SHA256

    6093612ab1af4a1569fe6e2c378ff40a573c958ef393b2d607dd2266015fda21

  • SHA512

    23863aa12a6ca7308c2380c66ff7d79917aa8972b931fce111d839ada879bdede23861e69332963822de2a120812df82438a9ab9b2e2113846f67bd27711cf5a

  • SSDEEP

    49152:dj/0KJDpeyhr7u8pa+Qbs9Z7q3hfQovzvqtT+panTytyfKuFa3dWAWmu:p/JJDp3x7u8pa+rXq3hfQqqtZnTZfG7

Score
10/10
savestealc

Malware Config

Extracted

Family

stealc

Botnet

save

C2

http://185.215.113.37

Attributes
  • url_path

    /e2b1563c6670f193.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2468-3-0x0000000001250000-0x00000000018E7000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections