General

  • Target

    3460-1201-0x0000000000400000-0x0000000000407000-memory.dmp

  • Size

    28KB

  • MD5

    0138932a997f24a0277450b58976d5e2

  • SHA1

    2964365b36f531c1f48d922d698eb7d3e82a8963

  • SHA256

    457ce800caeb663c4cc8c703294e05d476fcf9a2c7a3286023486acaf0579f08

  • SHA512

    d4a2ee952fd85c31ec629d0679bcbd41dead2011cd41d84b74788c69dd01a6fe28fe5746ec469a170c9ab172222fd60f8b5e5001b25549803047ea0c5219d76d

  • SSDEEP

    192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56Nga7oeA8W2BuJCcTB:0ZKGmESEH3s5jNIFa7TAmwJr

Score
10/10

Malware Config

Extracted

Family

systembc

C2

wodresomdaymomentum.org

Attributes
  • dns

    5.132.191.104

Signatures

  • Systembc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3460-1201-0x0000000000400000-0x0000000000407000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections