Overview

overview

10

Static

static

10

2436-3-0x0...ry.exe

windows7-x64

10

2436-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2436-3-0x0000000000D80000-0x000000000142C000-memory.dmp

  • Size

    6.7MB

  • MD5

    85ebc1e4ec48449f89dfcf0ad1236db3

  • SHA1

    c51cc1e987faf6e7a8e77599022fc85393d39837

  • SHA256

    3ac00a04b4d5eaad5020d94afc698c33b2631eda1e54e812f884bf85e28aff20

  • SHA512

    4bc38d05120369fb64a5c5e26c0fea70b5f271abb0f03e98092bb83589c020b401d46a639e0f035635352b60a81341991ab22f8a0023ac0ace0a18c5ad04b573

  • SSDEEP

    98304:XA8i1oTDBnRsIE6q+bxLWSAy9JMOtQw/BZWh+kmu7FGq1tu4IF:XAeBC6qrCJJQaZUlFp1tuLF

Score
10/10
kirastealc

Malware Config

Extracted

Family

stealc

Botnet

kira

C2

http://185.215.113.115

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2436-3-0x0000000000D80000-0x000000000142C000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections