General

  • Target

    2620-75-0x0000000000250000-0x000000000049C000-memory.dmp

  • Size

    2.3MB

  • MD5

    d1f54b5fef9e940e010f94ceeffe206e

  • SHA1

    0e6216c2a22c99b9f3f53c600b5f44789c5c5e6c

  • SHA256

    e414ac288d20b0407d2af26fc26601d32b8a42c4bcadc1fa7bc6114eef627ac2

  • SHA512

    3aab28cd53c9dc36ff64fd6c02b02f5063c0ce9d3e2665e518bd4c77bd3de8406bf9b5520343109b70fb007efa3feec27741172ab0cfc4cedba330345b3ceb98

  • SSDEEP

    49152:4Kc1hpOiMCQSoEFfDutF9itiBmK8hU1uPsm/i4YrTUJUUUUUUU:4Kc1hpOiM4B4UJUUUUUUU

Malware Config

Signatures

  • Asyncrat family
  • Stealerium family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2620-75-0x0000000000250000-0x000000000049C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections