Overview

overview

10

Static

static

10

1424-3-0x0...ry.exe

windows7-x64

10

1424-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1424-3-0x0000000000A80000-0x000000000111D000-memory.dmp

  • Size

    6.6MB

  • MD5

    209662db9d89b25bb457c57ee45fb56e

  • SHA1

    7614c0965ac750891124574369b64586ed862411

  • SHA256

    4d41ff3f0a80c0d503f5afea71f7c347ac9fd6d2b5a4bb35f9dc834d2a00896b

  • SHA512

    0ff2eed4fca25f0ae18dc18f0e1158f3e75f2cf5f0620d9d73f816e1786c8da112978a304167eca36976bac45feae7a24d0fce2f934d2901d7897163be77111f

  • SSDEEP

    98304:Hk1S5O7FCKLLPe/l6fxf7eI39nRHvtR8:2126F7f

Score
10/10
domastealc

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes
  • url_path

    /e2b1563c6670f193.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1424-3-0x0000000000A80000-0x000000000111D000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections