tofsee | e7aaf0623b32634d043c428dab1992f4361b8f7cd7e13fa6fe51875859c5cf37 | Triage

Sharing

General

Target

548-3-0x0000000000400000-0x0000000000415000-memory.dmp
Size

84KB
Sample

241011-r74ntsshpr
MD5

e0344b02235fa40cc2d554cbf5232cca
SHA1

42d7fd6867b202dd4a8305d20fc4c664e21bfea8
SHA256

e7aaf0623b32634d043c428dab1992f4361b8f7cd7e13fa6fe51875859c5cf37
SHA512

ac4375660367742d21f28ab65ebf25482d27b751f5f506fbae3e07f0af4f748d6f365000f8411f4aa520ac27ab7bc547412d8311873092111a581320ea0967a0
SSDEEP

1536:6kBs21VCAo/TxSYSkqFTjFWL9DdpIptUc:6UVCA6xSYBqFFupIpC

Score

10^/10

tofsee discovery

Malware Config

Extracted

Family

tofsee

C2

vanaheim.cn

jotunheim.name

Targets

- Target
  
  548-3-0x0000000000400000-0x0000000000415000-memory.dmp
- Size
  
  84KB
- MD5
  
  e0344b02235fa40cc2d554cbf5232cca
- SHA1
  
  42d7fd6867b202dd4a8305d20fc4c664e21bfea8
- SHA256
  
  e7aaf0623b32634d043c428dab1992f4361b8f7cd7e13fa6fe51875859c5cf37
- SHA512
  
  ac4375660367742d21f28ab65ebf25482d27b751f5f506fbae3e07f0af4f748d6f365000f8411f4aa520ac27ab7bc547412d8311873092111a581320ea0967a0
- SSDEEP
  
  1536:6kBs21VCAo/TxSYSkqFTjFWL9DdpIptUc:6UVCA6xSYBqFFupIpC
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2