Overview

overview

10

Static

static

10

2424-3-0x0...ry.exe

windows7-x64

1

2424-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2424-3-0x0000000001280000-0x0000000001905000-memory.dmp

  • Size

    6.5MB

  • MD5

    78712162a035b90b7642b26a92a22e6d

  • SHA1

    fb85376cfe4b9b3b840ff60d743ba871132d97e6

  • SHA256

    15089ea7e344f0410189bb690e052fb583e678cb92294094a5cfe9c98913d870

  • SHA512

    37286156a3c2b9675f8ed885002476ccdb6eff54b964a41efec24fb1f8a875b59465334d419c3633a3391ffd28f4ed814665908d9e67a2f826960222943b0046

  • SSDEEP

    98304:R7j9yeF2yLjSPxNOkwDQ1Wtm/va0a5GMl9UlESPWYFSoMGd:R7j9NKt1WYKNoOUmSP3FXd

Score
10/10
bratstealc

Malware Config

Extracted

Family

stealc

Botnet

brat

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2424-3-0x0000000001280000-0x0000000001905000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections