General

  • Target

    1496-157-0x0000000000400000-0x000000000083B000-memory.dmp

  • Size

    4.2MB

  • MD5

    1a3c6a2d1ed9900615dba70d7a4e26df

  • SHA1

    3a99480addb43cb676dbb52235a485c75b6da723

  • SHA256

    6c8b332a6c3697e4607d501288854876ced46019bdcaef6d3394ae99b4b41314

  • SHA512

    95ad23fd09bed9a5f094e85c4bbc56baff28222a85cfdf7e3bfd523fc1f676c40d229c096a56619aac7ed827583bcaa4eb8657d1ebd99b85e8b4f36aa6ac6c50

  • SSDEEP

    98304:gtnH6M+XAdBDyrFbGQJucsTpe63B2stRGcqmtHCAyLlV:HzfcxDTtNqmtr0lV

Score
10/10

Malware Config

Extracted

Family

systembc

C2

185.161.248.16:4440

Signatures

  • Systembc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1496-157-0x0000000000400000-0x000000000083B000-memory.dmp
    .exe windows x86


    Headers

    Sections