General

  • Target

    220-0-0x0000000000FF0000-0x0000000001687000-memory.dmp

  • Size

    6.6MB

  • MD5

    b16df2001c7408b5458550726efc23f5

  • SHA1

    a95b94d4f4cb48b203afff35fba707a799b1a5ea

  • SHA256

    5e9b5aefa8252c0d7c3ef2a286a1aa096e7fd8f391f18722e0edee7a40e086c8

  • SHA512

    1b565414233f61bd47bec87f0ad04d129eb92df288c006260e5c4b1d05225596cbe35ed8e36bd540a8aca37bac9630f808197ecad9599e1232585dae14825380

  • SSDEEP

    3072:NJAnWsN98GJkh1V0GzTfQ2u2FE/xZoOJ1gbIrWnXbxdUhViv+Q98Xwh:3Ab9HJGnzrQTZoO7gZXbxdiMvzqO

Score
10/10

Malware Config

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 220-0-0x0000000000FF0000-0x0000000001687000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections