General

  • Target

    8792-17575-0x0000000000B70000-0x0000000000EAC000-memory.dmp

  • Size

    3.2MB

  • MD5

    2c3271b986359ae546841d2fdfdd2c80

  • SHA1

    d0325b9509242a9d6550f5b1a40e7f965ede4f84

  • SHA256

    b147eafafafd6266a868d5c9797ad79cf570b8394e6e5a0a634002a06ff1369c

  • SHA512

    626c7a5cc614d7d859f27ee04ef9d82e1529a03c4e3e6c8c9d16105d4c2206c64865738d56e605f5290dcb4dc5fe3d997592e8cb6e6fad88bf9c656303cc4b51

  • SSDEEP

    49152:rEpSkeIml6Ow91xIOzzoMAzU0mdBdo+6WuDayPlr/NUJ:rwmEOqIOik

Score
10/10

Malware Config

Signatures

  • Asyncrat family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8792-17575-0x0000000000B70000-0x0000000000EAC000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections