General

  • Target

    3748-178-0x00007FFD35A40000-0x00007FFD35F79000-memory.dmp

  • Size

    5.2MB

  • MD5

    fc601112771fafe650c95d83c425ef81

  • SHA1

    7fbfd0cb361158e4ee47e33595bf9c71467f7e15

  • SHA256

    f0840384979a625c5b1834cc6032fc54ab2d0387e33121210121cfdb629a1004

  • SHA512

    ff23030b6d0f3ff628ace09dcff2b07e924a30f33f5cdc52322b8f73382f68953fc0081a4440d526867894947ca7bc58a6ee899109e3878a26d2fa851d714c61

  • SSDEEP

    98304:pijPbqhB9zCuFSR8UXD9gZ82FxZcK+W4xOvxSjuQxOYwRp/Sf+6mP6MoOCTUeKlg:YjPkvzCaSHz90c4c0x/V3S26pMo2JH

Score
10/10

Malware Config

Extracted

Family

systembc

C2

5.42.65.67:4298

localhost.exchange:4298

Signatures

  • Systembc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3748-178-0x00007FFD35A40000-0x00007FFD35F79000-memory.dmp
    .dll windows:5 windows x64 arch:x64


    Headers

    Sections