General

  • Target

    4228-134-0x00007FF935330000-0x00007FF935DB4000-memory.dmp

  • Size

    10.5MB

  • MD5

    d3291f165f4055b7beb19ba905cdbc14

  • SHA1

    96c946e90024222107710a57c4cbef42b97527e3

  • SHA256

    86342235b1d74543457906df6b603f5bc9cbc555e1f188c092fb47103e486c43

  • SHA512

    b5bcdc6f7d7a3dd173b90828be860ae1c49ce916cfca2c16bece2439ad5f34087d7c8a43c846eaa40b2a457e140a2037406877f147ce95db20a6ac26a1af6811

  • SSDEEP

    196608:bIYvCtoRw/Z7izOVJKkBumcyJ6O3LdCgPBSket86DDt0aR:0YvQoiBmzO7HhcyEcLdCgUJt8wDNR

Score
10/10

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Signatures

  • Systembc family
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4228-134-0x00007FF935330000-0x00007FF935DB4000-memory.dmp
    .dll windows x64


    Headers

    Sections