Overview

overview

10

Static

static

10

2708-3-0x0...ry.exe

windows7-x64

10

2708-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2708-3-0x0000000001010000-0x00000000016D4000-memory.dmp

  • Size

    6.8MB

  • MD5

    21fbcde5f2336c80aba743d7aae24c33

  • SHA1

    391463cded8b4f9f2497a08ea4b495120337f423

  • SHA256

    499afc013664a8f1017d9ef00169fe62be475d32ad7ac2c4bfd0218a662a4fee

  • SHA512

    b8af4352ff54b5edc499175d879c974fb9467578d758da1bb778360bddc009b80a0b50deeee91788f30171a8c8cb550e5b35e7d5e44b0214a5e297abacbb62ad

  • SSDEEP

    98304:ysOtYD376VZmZ7deioTe7LcVzU9whPYUk1+MYGNc5Iz:X4YDrzRxSenc1UoP5ghYqC

Score
10/10
domastealc

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes
  • url_path

    /e2b1563c6670f193.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2708-3-0x0000000001010000-0x00000000016D4000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections