Overview

overview

10

Static

static

10

2668-3-0x0...ry.exe

windows7-x64

10

2668-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2668-3-0x0000000000AC0000-0x0000000001165000-memory.dmp

  • Size

    6.6MB

  • MD5

    14c296a3734d6a1d6d39ac1bfe277caf

  • SHA1

    5079f0a2138debc7dfee8bcfb636baef52b677f0

  • SHA256

    fe54dbe9f6bf5d4dc105d22bd3e13a283f697d01b70956ef569eebf9ef6953a1

  • SHA512

    40c6dd4bd6f693bfb2b0dbdc5dfeae709f679d940fa5777d62279b54c1d56aca541447b77634a2b181161f733647258d6628db8dbea6a6edcbc719773329e991

  • SSDEEP

    98304:z3S46eRFAFqOZKu4ptlwoi8z5yrfDwKJjY2VYtTOo:GmN6oyLj9Kh

Score
10/10
domastealc

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes
  • url_path

    /e2b1563c6670f193.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2668-3-0x0000000000AC0000-0x0000000001165000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections