Overview

overview

10

Static

static

10

3292-41-0x...ry.exe

windows7-x64

10

3292-41-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3292-41-0x00000000009D0000-0x0000000000F69000-memory.dmp

  • Size

    5.6MB

  • MD5

    cf796e8d9f7e1eed595e2b1c4d60f2ed

  • SHA1

    bd752b75f13031f472022cfd84f247d08af23bfe

  • SHA256

    048133af699049155f024e309c79ff715b8c093d94b9efe923dc5cb16fe84d23

  • SHA512

    d58038b2100b738e032eb3c5bcb256c69dc5b54818dad38b9a2806dad47138b7a2ffb4f6e08431f1be93fe33c1fd806c9821b53a2e18c664b4612c1f844fd108

  • SSDEEP

    49152:cUayn5RL3FJu1BrsAPe8sMTJxVcMia3X8WbGtzP/0NZCIokXJxC4F:FaynbVMjrsMeNg3ia3MUMTsNZCrk

Score
10/10
silastealc

Malware Config

Extracted

Family

stealc

Botnet

sila

C2

http://85.28.47.31

Attributes
  • url_path

    /5499d72b3a3e55be.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3292-41-0x00000000009D0000-0x0000000000F69000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections