General

  • Target

    2200-3-0x0000000000400000-0x0000000002436000-memory.dmp

  • Size

    32.2MB

  • MD5

    95bffdcc1348702cf6b6d4bd9bcf8bcd

  • SHA1

    4cdaa9657fc9ac35448c5137be72c648f33ed670

  • SHA256

    6c4676fab4fd16b7e6786a00343781d35ba0f35c10152cc59800fe8008645d19

  • SHA512

    b40d3af9374e4d9d0c707541f2e468784c1c16a3591d24243a683cc789af4223f112c64b1c934e5013c2729a16e9d6e672320e9b59b6d11d55fed04085285199

  • SSDEEP

    6144:6DVCynACXFppIngbMsmo0GDPKsfCx6Jp4:K8vmFppTSoLzf2

Score
10/10

Malware Config

Extracted

Family

tofsee

C2

vanaheim.cn

jotunheim.name

Signatures

  • Tofsee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2200-3-0x0000000000400000-0x0000000002436000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections