Overview

overview

10

Static

static

10

5012-168-0...ry.exe

windows7_x64

3

5012-168-0...ry.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5012-168-0x000000007F230000-0x000000007F237000-memory.dmp

  • Size

    28KB

  • MD5

    85c3a80b85fceae0aba419b8b62ff831

  • SHA1

    fddd992da88232e5089c1eea80ffc588c8f85a1f

  • SHA256

    9ede37d9f3cfab9f073dcd9ec8bc27f8c4d3fd19659558d889eb2b6395cc9032

  • SHA512

    2157ef62b19ab144d73312b7eca58c1034c48f8f934ea7a41ecf24ddccbe26c442c0c1abee60c6a3164ac45768085d293cab2d42de1031056b8f4917219fc475

  • SSDEEP

    384:C6bb4K9bPGgKGHbsPVwuv0DiIL4lJMyNi0LlrVwnSnD:C6bbPb+gKKsPV320lJzNRLd

Score
10/10
build1colibri

Malware Config

Extracted

Family

colibri

Version

1.2.0

Botnet

Build1

C2

http://zpltcmgodhvvedxtfcygvbgjkvgvcguygytfigj.cc/gate.php

http://yugyuvyugguitgyuigtfyutdtoghghbbgyv.cx/gate.php

Signatures

Files

  • 5012-168-0x000000007F230000-0x000000007F237000-memory.dmp
    .exe windows x86


    Headers

    Sections