Overview

overview

10

Static

static

10

396-1202-0...ry.exe

windows7-x64

1

396-1202-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    396-1202-0x0000000000400000-0x0000000000407000-memory.dmp

  • Size

    28KB

  • MD5

    c75433597f1c0cdf04a8f7f7f677fbe6

  • SHA1

    335bbb580e64e2fee2ccae79fbd7729f8bc478b5

  • SHA256

    7cea15f90885f2a801c0eae82470ac1919e14538735fa5c386ac0272888810b8

  • SHA512

    bf6ef4cfbc8398361da5bcb768543e9d470a5b9e9a561cbd6cf9ee51b698db39244cead6fcb947d8d6f9919306acad2431774f8b4ae12cec9a3a4fbcfecc2f29

  • SSDEEP

    192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56NgaxeA8BIukV1FKF3s97ma9J:0ZKGmESEH3s5jNIFaQAcIukbYC9yCJ

Score
10/10
systembc

Malware Config

Extracted

Family

systembc

C2

wodresomdaymomentum.org

Attributes
  • dns

    5.132.191.104

Signatures

  • Systembc family
    systembc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 396-1202-0x0000000000400000-0x0000000000407000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections