Overview

overview

10

Static

static

10

2860-45-0x...ry.exe

windows7-x64

1

2860-45-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2860-45-0x0000000000A50000-0x00000000010ED000-memory.dmp

  • Size

    6.6MB

  • MD5

    aff3973c65b454b5aaaa7d67acf1a7a1

  • SHA1

    4bd3804035670b39e83f5bf6532f29231c9ca28b

  • SHA256

    42c729436ae577e608f966a13f7a2cc4199b183603497e1c790b7e5c6cd9f66e

  • SHA512

    31f3063b23f4af39591579bcc4b6f1227fd75d9de6ad1513d0f8b46b1964c35a1cbcb8697fd23c9cf5fb8639cb7a6c313af9ed4988f91f867d9ac68a7b50c9bb

  • SSDEEP

    98304:2ebVoHk7wtCkTCYF8rP39/bYPuiOTdUeKJtUf1+PuU:hJS8b39/b43OTu1JfmU

Score
10/10
marsstealc

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2860-45-0x0000000000A50000-0x00000000010ED000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections