Overview

overview

10

Static

static

10

604-3-0x00...ry.exe

windows7-x64

1

604-3-0x00...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    604-3-0x0000000000C50000-0x00000000012D6000-memory.dmp

  • Size

    6.5MB

  • MD5

    116b35bcb110160fba4d36ed5c7a3461

  • SHA1

    726cc1eebe7e8bdba2c21629ad28d765951ed489

  • SHA256

    b76b2e4ad1eeb7229895e21b09e81ced2718f3cf0b28065e7940d7ea108a1a45

  • SHA512

    dc804afaf62962425c95b6ccc6f3cb2c2cbc631a27bc6cfcf2398fc8a96cc3a356b9059fb7734662e4949beedf2ed65aba68b5813d1f607685bd5b236e679c55

  • SSDEEP

    98304:Y+ukbTDRtRjn1PqhlB4Cjz2zJR3zrQx+7:Yaj1qhz4Cj8T3cI

Score
10/10
bratstealc

Malware Config

Extracted

Family

stealc

Botnet

brat

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 604-3-0x0000000000C50000-0x00000000012D6000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections