General

  • Target

    2584-56-0x000007FEF4540000-0x000007FEF5013000-memory.dmp

  • Size

    10.8MB

  • MD5

    c46d64e419b42849bd29318d96952770

  • SHA1

    68fc0bfb2462f3804df7da6a21ce6ab5966c4d1d

  • SHA256

    d2e9cfd729025a68733b281eaff79eb61796a8ac6a568df95c70a0299d4245ba

  • SHA512

    fcc1441f0121f45ad375c98fcb18020d439cc1f01427a8c05541c22459436ee300f515d755962df808965110cd2e2a9d277cee639b20d866670dd998fc68fa08

  • SSDEEP

    196608:c1VaIlGnnnoC1QZvvvTygQWbe/VooNy10s2ZMLylTrDB:c/llGnnnoC1QlvGgQWbe/vN4d+lD

Score
10/10

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Signatures

  • Systembc family
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2584-56-0x000007FEF4540000-0x000007FEF5013000-memory.dmp
    .dll windows x64


    Headers

    Sections