General

  • Target

    2032-55-0x0000000000820000-0x00000000008E0000-memory.dmp

  • Size

    768KB

  • MD5

    e153a4a057a6976b5cc1b30ec6afa2bb

  • SHA1

    0d833718d659e5728aa51d7079ddbb005349a18d

  • SHA256

    73443370dce441892c9af8e44c9063329180bda8d7a227f7a9e6ef8d143a4c8c

  • SHA512

    0d0dd32b7948b0385fde55a6b08ea84f75f57978daa7a352154ec30ec5c9b0fb0e2ba64f78d00c38ded68298a5ee633bab758cca02823336c021ed51c70066e0

  • SSDEEP

    12288:Q94TkGYwhijYjApkez6esXyvZNuxjj02XhfqVPvwoSn7drOsCyXYqlLL/4C9VUIm:O4rBpeaW8xjj02Ri1woSnRrhXYqR4CEg

Score
10/10

Malware Config

Extracted

Family

cryptbot

C2

[<

http://sginiv12.top/gate.php

Attributes
  • payload_url

    http://bytcox01.top/gesell.dat

Signatures

Files

  • 2032-55-0x0000000000820000-0x00000000008E0000-memory.dmp