General

  • Target

    1716-1619-0x0000000000400000-0x0000000000704000-memory.dmp

  • Size

    3.0MB

  • MD5

    f53b954dd4dde29a4f3ac9304710a32d

  • SHA1

    63edd5de6577f7d80966133fd417c307c5d3bb02

  • SHA256

    9cde860896dbb9fce99c11cefc14ee79e71b5a0df2948501ad876f6015113824

  • SHA512

    55a734750cbd82056d34083ffd2de3136f8225c3d07e705adfd4105c2cef808d50d4c9084b3e900a56f6674915cb48bee833005a5f3158889806996d73e5c071

  • SSDEEP

    49152:qGOcVbo6v2CNR7oZZTLSobgUBu3B3kNC3H6vUZ7r/NyQ:qGOcm6LRkZZTLSW

Score
10/10

Malware Config

Signatures

  • Asyncrat family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1716-1619-0x0000000000400000-0x0000000000704000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections