Overview

overview

10

Static

static

10

1984-320-0...ry.exe

windows7-x64

10

1984-320-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1984-320-0x0000000001310000-0x00000000019A7000-memory.dmp

  • Size

    6.6MB

  • MD5

    7697e60bb893bb0c27bf8835979bf8f0

  • SHA1

    deac8e21d2df80bc3c64b4adc131747f670b4e7e

  • SHA256

    6f2f67567b606277766af8521347cabf2fc45b4ea3291ec45b19eabd92ec7675

  • SHA512

    74a5e840b10bc157fb29dd6d139f3b837bc26e32f174ea87f979b77efd0f8bcc629ebb75b1fcfb6b9661354b3a351a5ed4b539086954cdcc8239a1c4c6c0b4cc

  • SSDEEP

    98304:vSVEiMa0ywj3mdr3Y+T545AT4PvnjiyaAeOKRdEGETy:HmpU3nGyaAeOKnx

Score
10/10
marsstealc

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1984-320-0x0000000001310000-0x00000000019A7000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections