Overview

overview

10

Static

static

10

4048-1201-...ry.exe

windows7-x64

1

4048-1201-...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4048-1201-0x0000000000400000-0x0000000000407000-memory.dmp

  • Size

    28KB

  • MD5

    f212d9a48207cc5a51135c243b022be6

  • SHA1

    c7eb0353cf4faa983809a12c3c192269e1674d80

  • SHA256

    70bf4c89f068ef0aeb256cb3415bdde2bbd5bd65237c1e1f07ad10439ac2ef6e

  • SHA512

    d963e7dd8fe4ea1dc36c0131e09f15d4b3219501902c4aea38cc2d499271108216283e5c1a6aadfaac89767f8ef1ac83d0bf02b67749042fe57370732d7967cb

  • SSDEEP

    192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56NgaReA85TPtevUQd/XKVeaD0:0ZKGmESEH3s5jNIFawAozUvxvKsb

Score
10/10
systembc

Malware Config

Extracted

Family

systembc

C2

wodresomdaymomentum.org

Attributes
  • dns

    5.132.191.104

Signatures

  • Systembc family
    systembc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4048-1201-0x0000000000400000-0x0000000000407000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections