General

  • Target

    2980-746-0x00000000003F0000-0x00000000006F4000-memory.dmp

  • Size

    3.0MB

  • MD5

    f6ee40b339b47c0deab713fc078244dd

  • SHA1

    4b1416d48d37bb43797c7510c05d4f9ed4c3ea11

  • SHA256

    2d1e3abbd40c21b4d0150134f59ccbac04ad231df2a909b0908b40365db1feec

  • SHA512

    5f455e2732910d63ff55b281c622d31e563eee4a3c7bbf24c4e1c6261bd8db70c3fbcdbf78a3bf8fc3885528b0edc51e9bb0bb4763bab73486ef120d28e029b4

  • SSDEEP

    49152:cGVLgqHUpmdatQdsgUBX3B3kNC3H6vUZcr/Nxe:cGFQpmdatQSa

Score
10/10

Malware Config

Signatures

  • Asyncrat family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2980-746-0x00000000003F0000-0x00000000006F4000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections