Overview

overview

10

Static

static

10

4856-0-0x0...ry.exe

windows7-x64

3

4856-0-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4856-0-0x0000000000D70000-0x0000000001406000-memory.dmp

  • Size

    6.6MB

  • MD5

    157d1023d2626dfa163f7a8792b087d2

  • SHA1

    1a09ba131319039c795db663345d888212d291e1

  • SHA256

    330779b8e104372af4f593e625aaaf7bbdaf7c765f53e1ab34b636178fa716fe

  • SHA512

    8b3a1d8a3237e387239250a84e011fef20288d14f9d91631bc3ea826d1444dff150301d30928e018d0dc617bf9ad2566ef8630957624ed8a3366d2208122fc80

  • SSDEEP

    3072:cOYlfb/PsfwN1/nexfBdvekBzu9em2Lx8uhOi1ruM3FFGpvv+Q98XFb:az/HN1mvMkBz1HFfOi1ruTvzqd

Score
10/10
stealc

Malware Config

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4856-0-0x0000000000D70000-0x0000000001406000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections