General

  • Target

    4704-5-0x0000000000400000-0x0000000000704000-memory.dmp

  • Size

    3.0MB

  • MD5

    f5eca8f9eb019dc531acd15b1b4dfca3

  • SHA1

    ffa5c8a8802d68913c3533db711ae6faada3d9ab

  • SHA256

    49dd56cb65c8d55b044124c655185b1c490ebe72d0201329ca85e40e3815ae76

  • SHA512

    6553b51d24536ef34ec776a910a42cf8cdb8b7ef7b61ed02f08126df4513eeeec5d0b49388519b6206a24ab042bef40196576d6baeee77ac6a13b6984b7bdbdf

  • SSDEEP

    49152:mGOcVbo6v2CNR7oZZTLSobgUBu3B3kNC3H6vUZ7r/NyQ:mGOcm6LRkZZTLSW

Score
10/10

Malware Config

Signatures

  • Asyncrat family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4704-5-0x0000000000400000-0x0000000000704000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections