Overview

overview

10

Static

static

10

2068-3-0x0...ry.exe

windows7-x64

1

2068-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2068-3-0x00000000009D0000-0x0000000001060000-memory.dmp

  • Size

    6.6MB

  • MD5

    edb748c9786b7a4c5f855dfa7edf2e48

  • SHA1

    4cdcb7970154bdac57fb48c0882a1dc3de1cc4ed

  • SHA256

    701e14d24a1b778c292f5bc966635ffa8c8932bddcf017d96b2a6dfb7cf7e361

  • SHA512

    28b605e610a7e087c44bc51cb7680e4ea819ab7668f66bf3801ea51c8cf2ce899886c8600e4e4f85b736e7330b8f54dd278f4e1d1121987b045b6ee176ebdcfb

  • SSDEEP

    98304:hPbO6IKTghmv8Z/8/XcVXYYkYLW8ukYLmVIdDchq85VO:hPnK9YLqIdD+5V

Score
10/10
bratstealc

Malware Config

Extracted

Family

stealc

Botnet

brat

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2068-3-0x00000000009D0000-0x0000000001060000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections