General

  • Target

    4448-2-0x0000000005240000-0x0000000005544000-memory.dmp

  • Size

    3.0MB

  • MD5

    71196f07827a112df47dd2921241eee7

  • SHA1

    b475271485bf182ecacdbc20c63ed6b00524a2b9

  • SHA256

    dbd418893b7c30779a5736161f94ce0bdccc81f01c6eee54c419b0547edee971

  • SHA512

    783b634d3efea801e895a12f994140f796cefdbfed5a542fc962459e73451167329e5d9fb98dcbe85f04a31817022f81385c531ef558f3c9f084897431bd9c6d

  • SSDEEP

    49152:XPCQNqtCSmdatQdsgUBX3B3kNC3H6vUZIr/Nxe:XPVlSmdatQSq

Score
10/10

Malware Config

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4448-2-0x0000000005240000-0x0000000005544000-memory.dmp
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections