Overview

overview

10

Static

static

10

3044-125-0...ry.exe

windows7-x64

1

3044-125-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3044-125-0x0000000001300000-0x0000000001999000-memory.dmp

  • Size

    6.6MB

  • MD5

    12307602d2415edcda9bc609f96c8faa

  • SHA1

    f3fa52a0ade968a660ca104671429425feb3bba0

  • SHA256

    b56847e5b905198b7be62f2bed04e727ca7eae3364376871eef888f25aadcef1

  • SHA512

    1d4ecf487c01228433a751fd19405c5d77ecd62b612a112c07394d9b9ed0bf02fc873af3147f0b2ef78850a9dbc02e1d0b49f2ce0bc38cfd5dba3344269824a6

  • SSDEEP

    98304:9ols8gYTTgyuQK8/BiIYfjlYSeOsJbw5:783wXHpIYZPi0

Score
10/10
marsstealc

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3044-125-0x0000000001300000-0x0000000001999000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections