Overview

overview

10

Static

static

10

2192-3-0x0...ry.exe

windows7-x64

10

2192-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2192-3-0x0000000000010000-0x0000000000684000-memory.dmp

  • Size

    6.5MB

  • MD5

    dd188e91379798e5cf261bba5d967330

  • SHA1

    d6e5b792305ed12467706a4a32c398dbdf699391

  • SHA256

    452dbd60a6eb77abef3ba7dc485ab328de492cf072e88ed251c1c4fe3e162b65

  • SHA512

    9480a40c6eb010b35765e7c2424ac5134972a26117af4f9b05429c44021dc370a473bc90fd4b3c886195391bf21ef69ca6d2e9bb00b1e9fd5baaf2bfc657bbfd

  • SSDEEP

    98304:vy+oqy3DiRHg/bC6YXdJz1Gn/Qglm4YkLLbduDTXT:vBXPzQowN73wDT

Score
10/10
domastealc

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes
  • url_path

    /e2b1563c6670f193.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2192-3-0x0000000000010000-0x0000000000684000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections