General

  • Target

    a6be4a8bc3e95b9f707e9b35bdd31dcfae4aa4c88dc8fb7187353908002976d3N

  • Size

    71KB

  • MD5

    c3c6af010d771458681fd41cdafa8990

  • SHA1

    48ee35b3354051a816ea68430836c8eaab5e8184

  • SHA256

    a6be4a8bc3e95b9f707e9b35bdd31dcfae4aa4c88dc8fb7187353908002976d3

  • SHA512

    070e1669564535e656e20ca9b14662613d14764773486694dc0ced8c9d08448c69d2ceaa88b9f08b546352f288e71b1832231982f9895d3a8b7b02bfabee82ae

  • SSDEEP

    1536:Dkes21VCy1nTxSYg3CXTjFWL9ddpIHUc:DDVCyFxSYACXFMpI0

Score
10/10

Malware Config

Extracted

Family

tofsee

C2

vanaheim.cn

jotunheim.name

Signatures

  • Tofsee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a6be4a8bc3e95b9f707e9b35bdd31dcfae4aa4c88dc8fb7187353908002976d3N
    .exe windows:5 windows x86 arch:x86

    0bdef4d92a94790d7d279561a490c5bb


    Headers

    Imports

    Sections