General

  • Target

    2060-57-0x0000000000400000-0x000000000059E000-memory.dmp

  • Size

    1.6MB

  • MD5

    773b1c2cd8075cfdffd48bca50314fc3

  • SHA1

    bdd335afcf76391e543f7ce4dab821d884ecc74a

  • SHA256

    ba2b26d2056ef71ea03114ff2fd7fca9cff97833ee058cb225785d097463bb33

  • SHA512

    96a647f6f975c9e2ee6e815d59a0bbca60a9662979bbbd818c942a3efb08df21ed88044aa7862aa7909e2081b446fa6a2330214744092f3f45c1904f22849c27

  • SSDEEP

    3072:6DVCyFxSYACXFMbpI/ePDvzwh6k1Grho2tTMTcGmv25JTkdGFB6TR:6DVCynACXFMbpIGPwL19RwGsKTes6T

Score
10/10

Malware Config

Extracted

Family

tofsee

C2

vanaheim.cn

jotunheim.name

Signatures

  • Tofsee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2060-57-0x0000000000400000-0x000000000059E000-memory.dmp
    .exe windows x86


    Headers

    Sections