Behavioral task
behavioral1
Sample
2488-269-0x0000000000400000-0x0000000000B55000-memory.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
2488-269-0x0000000000400000-0x0000000000B55000-memory.exe
Resource
win10v2004-20220414-en
General
-
Target
2488-269-0x0000000000400000-0x0000000000B55000-memory.dmp
-
Size
7.3MB
-
MD5
2e0b0a5610b6e72b3a3417aebdabdde1
-
SHA1
092974d6ab3c3c2fa303a16a8cd5ac49cf5f4dcb
-
SHA256
64b5fa1bbca7c40559b1441a2e4a5a80d42264d7952e148329d3dd29fb5025d7
-
SHA512
beb5b563ec8e655f5f26dc37e47144e33b224877804a69e860479b46f9e1a1129111c3dcab6fe0b1c82ac2117b7646c4f856f2d696cac8e714cf39d678265b18
-
SSDEEP
3072:/KTYHEgHiB+xxZlJh/J9BbQymS9yO0s32+4WC91OZGX4CZNzJrOF5yj4naeUChGK:/KTYLrdpVpt4WCz3X91Z4azCEk451LT
Malware Config
Extracted
vidar
53
937
https://t.me/ch_inagroup
https://mastodon.social/@olegf9844e
-
profile_id
937
Signatures
Files
-
2488-269-0x0000000000400000-0x0000000000B55000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ