Overview

overview

10

Static

static

10

2128-570-0...ry.exe

windows7-x64

1

2128-570-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2128-570-0x0000000000C80000-0x0000000001328000-memory.dmp

  • Size

    6.7MB

  • MD5

    ca90ef47be60c2e7aec367a53d178ba8

  • SHA1

    c27fb2c83e12290ded886495744c5d5261fd3749

  • SHA256

    db6a121643e76d2c0e7db95f7f0ca460c3d9e1de2ff2e7ad1ef52b4a48e2aafa

  • SHA512

    ace0eeecfe6ef8d0453e14ed9688de543b0539273bc89be8f030ea141bd5068e5a5c937b97b70e3ce1ebdf4676e4452dae1c0ca401fea58926055dae1bfbcc4e

  • SSDEEP

    98304:g3R63CGGVJ7txUBLBNdX9MCToYwi8ASAonRC/oVhx:Sv8BM/Yp8ASAoRpx

Score
10/10
renostealc

Malware Config

Extracted

Family

stealc

Botnet

reno

C2

http://185.215.113.115

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2128-570-0x0000000000C80000-0x0000000001328000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections