Overview

overview

10

Static

static

10

2148-55-0x...ry.dll

windows7-x64

3

2148-55-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2148-55-0x000007FEF54E0000-0x000007FEF5F64000-memory.dmp

  • Size

    10.5MB

  • MD5

    f851a2ea7081551187eb57ea90d20b41

  • SHA1

    8a294038f8fbba60bd3271fbdea73d68277b9070

  • SHA256

    0afeeac1c962ac4fedd58f2bd9ba5b8a99e2befede29d89405651c7373a58144

  • SHA512

    aa9f79a240918b71381e7400d87bd8b9c17cf0c6fba30e6d863f6590a03ea09b516a80bbf75d7a66080e44d2475916146517ec5723bbdbafb1c00f75d8623aab

  • SSDEEP

    196608:Mi/k/zAId/X7MN4HhXkBumcyJ6O3LdCgPrSket8QDDmc6I:D/kbAMvQN4B+hcyEcLdCguJt8aDUI

Score
10/10
vmprotectsystembc

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Signatures

  • Systembc family
    systembc
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2148-55-0x000007FEF54E0000-0x000007FEF5F64000-memory.dmp
    .dll windows x64


    Headers

    Sections