Overview

overview

10

Static

static

10

1764-3-0x0...ry.exe

windows7-x64

1

1764-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1764-3-0x0000000000010000-0x00000000006A8000-memory.dmp

  • Size

    6.6MB

  • MD5

    684715fc35be4026776f7d5e8a7f4f25

  • SHA1

    f0d639b8b81bca6d82537a4daccb7946628bd40d

  • SHA256

    075b370d107a1ee46dd84c1f9b78f74222ce5ef606d11fbd89b2aa6f7d2ce344

  • SHA512

    ab64b07d467ef017223f825d67b4c2eba220d978b4147d2c676f57ec60cf3201b8ee9384c657e526994aef2488fd82791167126e6d5616c9cf0659b3fa0981b2

  • SSDEEP

    98304:ySrzf2Sae/A6Sd6yeDy3jaXaJcRzVaDOs228oay+08vUw9:lo6Sd6NDy32X+iMOs0o8r

Score
10/10
bratstealc

Malware Config

Extracted

Family

stealc

Botnet

brat

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1764-3-0x0000000000010000-0x00000000006A8000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections