Overview

overview

10

Static

static

10

2092-3-0x0...ry.exe

windows7-x64

1

2092-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2092-3-0x0000000000170000-0x0000000000815000-memory.dmp

  • Size

    6.6MB

  • MD5

    05bb60a24afad04f179cbc59b004cdf6

  • SHA1

    3bf22c298289dd0a40d8d6f6c3d9fb34afcf1b0b

  • SHA256

    42326cd63a515974ffa888ef736e8cfc02e5cedf600169ff2d040141d4187f7d

  • SHA512

    e88656000b13009bd2fbf79802004e46a910f9ce90d4edb964fae1d1a1d4b590e7405f2cb6d702ca9d8921ea9cbbe50bcaa41a5dfefaf48edbeae9dc3f26a2aa

  • SSDEEP

    98304:4MCWQkifpWTfLUHpr20IDnJQTsA7yJg1RMRagn/mBV:aJrCDJQQA+Jp/C

Score
10/10
renostealc

Malware Config

Extracted

Family

stealc

Botnet

reno

C2

http://185.215.113.115

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2092-3-0x0000000000170000-0x0000000000815000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections