General

  • Target

    44163d81bb5710839fb9ba265de2c942.dll

  • Size

    13KB

  • MD5

    44163d81bb5710839fb9ba265de2c942

  • SHA1

    a7497d6085ed8ce25e9728a0af7e989e026eaf04

  • SHA256

    de4e3ff7f7da5d5561e384585a9d0cb66f2c51ea324c184848d125d8792bf666

  • SHA512

    97ef4974f41affd04eb960fa873cd9754f31007c3d7239a7fb5b17cc152c01f2050c3b25d107e36ab5c65010610624e773f726de7d39255bb2c0ad5d8b9929a4

  • SSDEEP

    192:4BNFWXEJWCx1TFZM4kUzGJjZC2363AP0HQ9M1uiTkXhMQzpaQA:4hlJRX7M48ZC2u9wWcXja

Score
10/10

Malware Config

Extracted

Family

systembc

C2

wodresomdaymomentum.org

Attributes
  • dns

    5.132.191.104

    ns1.vic.au.dns.opennic.glue

    ns2.vic.au.dns.opennic.glue

Signatures

  • Systembc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44163d81bb5710839fb9ba265de2c942.dll
    .dll windows:4 windows x86 arch:x86

    06838762d82c7c8d4d73da706425a89f


    Headers

    Imports

    Exports

    Sections