Overview

overview

10

Static

static

10

2228-80-0x...ry.exe

windows7-x64

10

2228-80-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2228-80-0x00000000008D0000-0x0000000000FFD000-memory.dmp

  • Size

    7.2MB

  • MD5

    9c8a912948c034e1691b73c9ff6dc1f6

  • SHA1

    cf407d45ef75f663cc7063aed0158b19453fb871

  • SHA256

    8f2df647848376a628521378ed7295bacc768482f6d144ef904e94f298eecb02

  • SHA512

    0b67cda1c9c6d3ed39dda78d2d5e2922bf2fc730de7a5d71c7578c5968e51d8201531b2a1341217e7956dac0fed4791adf14865d720cbfe7ee54d3a23e15c101

  • SSDEEP

    98304:A6GJtF4RIwyblhD7XiiHoKr2i4mVKsdJFOgi8uKwXUcfcYBBzwnY7S5a2GDMB:3Gh6ybvP7fFOJ9pXzfc6B8bH

Score
10/10
talestealc

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes
  • url_path

    /6c4adf523b719729.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2228-80-0x00000000008D0000-0x0000000000FFD000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections