Behavioral task
behavioral1
Sample
314162d5563b04d068f24af89ffceb3311fe225b4ee82faf6ae95fcb1f8baef9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
314162d5563b04d068f24af89ffceb3311fe225b4ee82faf6ae95fcb1f8baef9.exe
Resource
win10v2004-20220812-en
General
-
Target
314162d5563b04d068f24af89ffceb3311fe225b4ee82faf6ae95fcb1f8baef9
-
Size
76KB
-
MD5
6bb375a237d2aa38f53811acd1907220
-
SHA1
810b1cd00cf1c76ccb356fb3a4b6044ca4c34be3
-
SHA256
314162d5563b04d068f24af89ffceb3311fe225b4ee82faf6ae95fcb1f8baef9
-
SHA512
5a897c3f30007d9193e7b297e831aab9b6f91efa4de305df0a4805c429f6c175e0a4a1deb42f738fbb13f5abb6ccbb4c7527fd00768e3efad30cf7175c222fef
-
SSDEEP
1536:Hw1zOKCscfznhIRotOW14MlLkyTXm9PvwG8QJ:HKz2/znhIRAOW14qTXm9Pl8W
Malware Config
Extracted
tofsee
43.252.173.152
111.121.193.242
43.249.252.190
Signatures
-
Tofsee family
Files
-
314162d5563b04d068f24af89ffceb3311fe225b4ee82faf6ae95fcb1f8baef9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
mem1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE