General

  • Target

    1632-66-0x0000000000400000-0x0000000000438000-memory.dmp

  • Size

    224KB

  • MD5

    bd68b1f316aeec8970295e1941557cee

  • SHA1

    e41bddf2ac9d6842e05865b2695f80c6dfc4c0e6

  • SHA256

    f47c2fde375f4f1d476ebfa31727aa864d1609e3413116b9643f9c3f08f8a30c

  • SHA512

    ebb3793d1026f3595b5a0b20fa69521bfe16aedb47f7de9f3b37538679058b82d7b5e1b61e67473d6b2640a069c3fb782cad738c4fd85465073755a4743bae22

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIK1Xi6FL:WfUauY68uSWCx+XA7mg2pN/1L

Score
10/10

Malware Config

Extracted

Family

oski

C2

gconnect.pro

Signatures

Files

  • 1632-66-0x0000000000400000-0x0000000000438000-memory.dmp
    .exe windows x86


    Headers

    Sections