Overview

overview

10

Static

static

10

1552-3-0x0...ry.exe

windows7-x64

1

1552-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1552-3-0x0000000001110000-0x000000000179A000-memory.dmp

  • Size

    6.5MB

  • MD5

    cf5c34b5380ac0247bd3eef8f08b67d5

  • SHA1

    0f64635540c1c10dc2cccfce10fe9b3cead66c2d

  • SHA256

    264d932194dee6a48d120a845873765a2507a5b8f5160edce99e410dd7cab5ed

  • SHA512

    ac3e2bbee6da6d449ebc5cd458892973438af974a07ddd0d80ea959ef567e5ed5d40ae3a6f0d60774524740d26afb7b839686488b1bfc84655dea0777e806ce2

  • SSDEEP

    49152:giARvmdzV8fOAqJkm8YMWfX9dektRxSXm0Bbu2FLLOqPKl44:gmdh82AqJkm8YMWfX9de2yW+qwqf

Score
10/10
bratstealc

Malware Config

Extracted

Family

stealc

Botnet

brat

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1552-3-0x0000000001110000-0x000000000179A000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections