Overview

overview

10

Static

static

10

2204-3-0x0...ry.exe

windows7-x64

10

2204-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2204-3-0x0000000000010000-0x00000000006C6000-memory.dmp

  • Size

    6.7MB

  • MD5

    feba0ed72680a1fc74cb1ba1a85ef620

  • SHA1

    d34d86310af2ca8a0016a4062568ae3f9048c98d

  • SHA256

    dba4db875d9ce1a167c5f4c298e535a79035bdb14e36cac92d14ae18ad8ec16e

  • SHA512

    348dd45a300646baab033fd923e06208644aeb749e3a7dfa3e27a2b8e7aa7ce737b13c9990bee4f287ed7413ef97dc2d07567448c84b2b670ba5be2e919facd3

  • SSDEEP

    98304:xpb16nw0sRnyBcd0thzONASJMxWPAYaZsiZSytyVD7/:XKGaxwoY0si8ygDz

Score
10/10
domastealc

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes
  • url_path

    /e2b1563c6670f193.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2204-3-0x0000000000010000-0x00000000006C6000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections