General

  • Target

    3012-72-0x000007FEF5540000-0x000007FEF5C70000-memory.dmp

  • Size

    7.2MB

  • MD5

    953ccba450ea197ddd041e2059193895

  • SHA1

    fde4bf30b9fa25e8ab5d45ed4eed5bea16841928

  • SHA256

    3a5934e73c3c5351362a0a411113a228663b85e9dacd334a9bc35cf3aa6bea71

  • SHA512

    d76cf1c94e23987059cdfb26b903704672007e8ade9da7179cb0e962aa26f40e51989a91e15ce9c5f583cf07daeaa4a5b67629d9a2add5282338b48dbf7fcbd9

  • SSDEEP

    196608:rxxUA5/MQSaVuoCev72/8tUG7YzDGaixTPnHXbQ:4ekHasovvsKUZforXbQ

Score
10/10

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Signatures

  • Systembc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3012-72-0x000007FEF5540000-0x000007FEF5C70000-memory.dmp
    .dll windows x64


    Headers

    Sections