General
- Target 1968-2-0x0000000000400000-0x00000000004FB000-memory.dmp
- Size 1004KB
- Sample231025-2yhecagg83
- SHA256 581acf22b6cff4c6439fab65ad59d3341d9dfbd7d414a68d7f8e505957414650
- MD5 31fcce0a4e6cb79a6dfcc36ca1dfb7b7
- SHA1 94b0237ed56aaaba09c449b9d72fcb3231206188
- SHA512 3c91a7009851cafce60e8a2d028b584bed0b95e98dc6729face0ebc4498f634157f1dc5bb3765aa9b260589fcb0ebf87a5f70e1246903384a615a3f1c819193a
- SSDEEP 3072:6DVCyFxSYACXF6pIBr2W3hR8b/67c3HL+Yl4MyrBHH75aHyQkib0RC:6DVCynACXF6pIV2zbL3HL+YazBk
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
1968-2-0x0000000000400000-0x00000000004FB000-memory.exe
Resource
win7-20231020-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1968-2-0x0000000000400000-0x00000000004FB000-memory.exe
Resource
win10v2004-20231023-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
tofsee
C2
-
vanaheim.cn
-
jotunheim.name
Targets
-
- Target 1968-2-0x0000000000400000-0x00000000004FB000-memory.dmp
- Size 1004KB
- SHA256 581acf22b6cff4c6439fab65ad59d3341d9dfbd7d414a68d7f8e505957414650
- MD5 31fcce0a4e6cb79a6dfcc36ca1dfb7b7
- SHA1 94b0237ed56aaaba09c449b9d72fcb3231206188
- SHA512 3c91a7009851cafce60e8a2d028b584bed0b95e98dc6729face0ebc4498f634157f1dc5bb3765aa9b260589fcb0ebf87a5f70e1246903384a615a3f1c819193a
- SSDEEP 3072:6DVCyFxSYACXF6pIBr2W3hR8b/67c3HL+Yl4MyrBHH75aHyQkib0RC:6DVCynACXF6pIV2zbL3HL+YazBk
- MD5 SHA1 SHA512 SSDEEP
Score3/10