Overview

overview

10

Static

static

10

2404-3-0x0...ry.exe

windows7-x64

10

2404-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2404-3-0x0000000000E30000-0x00000000014C5000-memory.dmp

  • Size

    6.6MB

  • MD5

    5524d6cc7f20b0b931be5091d179e8d6

  • SHA1

    e50a69abab4c435673293682632845fe0b1971b8

  • SHA256

    ecfe923e7f384a1d3fc76476ff043405d15d9e434d67d2a75000d93bdd46ae63

  • SHA512

    b9215502e3a16944ebc4f0d003d1b64aed87dd26853ec7295f0d71b893bc7ca4a464cc42a142b99677e6700811c45cab1ee5ea6a43e1c8bc6f8097833c2ddf6d

  • SSDEEP

    98304:at4LKHDDLoNzkeGQFCv33pNkvNGWq++xE+KJLohSaZ3:beKFqHpGvotxc8hXZ

Score
10/10
domastealc

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes
  • url_path

    /e2b1563c6670f193.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2404-3-0x0000000000E30000-0x00000000014C5000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections