Overview

overview

10

Static

static

10

2200-4-0x0...ry.exe

windows7-x64

3

2200-4-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2200-4-0x0000000000400000-0x000000000085D000-memory.dmp

  • Size

    4.4MB

  • MD5

    b086f6e6fa397b2210d626cc9d716071

  • SHA1

    2600aa63410da3ece6e6e32fb9cffc0f65a9033d

  • SHA256

    27cdb61fcf1069f938d88cc28cd6ba196c57e871e3ead281f00f7b3ca069606c

  • SHA512

    8fc11621586522aaed668d7d3f70feefa750cb8eb718674c3af7bbe3e4f0e460c36264945c9323799d68b5b421d29f6919fdea6e368ae245c3558abb724f48d6

  • SSDEEP

    3072:6DVCyFxSYACXF3pItxpGY8ugh5uHiUTG2qiZg/PUsSkgeRp:6DVCynACXF3pI/sYgh5pUTAsJkge

Score
10/10
tofsee

Malware Config

Extracted

Family

tofsee

C2

vanaheim.cn

jotunheim.name

Signatures

  • Tofsee family
    tofsee
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2200-4-0x0000000000400000-0x000000000085D000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections