General

  • Target

    3016-0-0x0000000000E70000-0x00000000014F8000-memory.dmp

  • Size

    6.5MB

  • MD5

    ac3352962cf8a9f475739332d9dd191e

  • SHA1

    3ad74a8d804ee9b87740df2ae6e50f8eb14740be

  • SHA256

    24a20e61d654504b5f059e25b171ff91791788f930f9c496b2378a24dbb97a2d

  • SHA512

    801474d4f0e1fdcec88d08186f6987dd5cc5f82a1b40e6d31e51b27fb8c43fe9a664e044982b87575e2e1fc4987a46aba1d47fc987c1ae29df4585700bb178c2

  • SSDEEP

    3072:7AnT7sc4OoSgENJ6Q3x2B/XuP3CEvfgFN0h0O5Ya8v+Q98Xu9:95lqJ6KrP3CEnGCaO5uvzqA

Score
10/10

Malware Config

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3016-0-0x0000000000E70000-0x00000000014F8000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections