General

  • Target

    2144-134-0x00007FFF9E9D0000-0x00007FFF9F3A1000-memory.dmp

  • Size

    9.8MB

  • MD5

    520457119e3b214dbc70a76ea8883616

  • SHA1

    d2cd42e0404b6ff7c8cf40f0aa7e8e9a54ef5e57

  • SHA256

    97148ba7837b984e6a7df3db3c5934e39db3a8104a0ce81d61af945b29265d32

  • SHA512

    76ea9a65f12be011fdc944533e72033ff14eae400ca915129d947e08bc8d82e4312c80929b0ce91611d11d62017da79a474b162ca8eee75a0c65d6d126f7b5b7

  • SSDEEP

    196608:X5d4KTMvwHNKI5AQhukIm9kKI2BFBS3m0h/P/S2QYOyEF35UQRY:X5dtTLtfAQhyRKIrmqn6o9E15HRY

Score
10/10

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Signatures

  • Systembc family
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2144-134-0x00007FFF9E9D0000-0x00007FFF9F3A1000-memory.dmp
    .dll windows x64


    Headers

    Sections