Overview

overview

10

Static

static

10

2188-3-0x0...ry.exe

windows7-x64

10

2188-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2188-3-0x00000000000A0000-0x0000000000742000-memory.dmp

  • Size

    6.6MB

  • MD5

    e4b988a5ab9a18045f5d32a90c507d17

  • SHA1

    ec023b1c0968895870def7505d3acaa6bd87910a

  • SHA256

    2657c043c1af86f9b54e673b23617894fccb298d3ae0574b7e73023750851f28

  • SHA512

    f250447dbb4071aa8aa2b666e575d46a1c059a18918616f2b6391159a72877f79389c14a22ea5102eed68b159015aba08c9cca84ea145e50063fa127b28940eb

  • SSDEEP

    98304:j7R5iT+k45HCXHFEjUve9Zh5a2N5q452XSdaORGlZlvGUJ7ND+mv:jXiSGEjUvePaQgI2XSIOI1vGUJ

Score
10/10
domastealc

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes
  • url_path

    /e2b1563c6670f193.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2188-3-0x00000000000A0000-0x0000000000742000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections