Overview

overview

10

Static

static

10

2320-3-0x0...ry.exe

windows7-x64

1

2320-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2320-3-0x00000000012A0000-0x0000000001927000-memory.dmp

  • Size

    6.5MB

  • MD5

    1ef8d3188c56745950fdc47d9613dd96

  • SHA1

    0e55b18ce9acf4b90a648b276e7784144c303d5d

  • SHA256

    3132afd75a40fbaf3732116864e7a93ace539b93dac5844a719223e60c71ac15

  • SHA512

    1e1c1a69eb43bc488ea0f00bc722bb7df25c0196ebf3156c68335eea06bf7e71f32ff989439bc33f09f759a06415d73dfef38f8dc943b9ff5d85542410bdedfd

  • SSDEEP

    98304:5otYHCArmrwTcahQgMv3uC7rDgJa/EUq31Olt83dA:H8S3hQgY37XDgJUqFOlKt

Score
10/10
marsstealc

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2320-3-0x00000000012A0000-0x0000000001927000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections