General

  • Target
    880-78-0x0000000000400000-0x00000000004D7000-memory.dmp
  • Size 860KB
  • Sample221215-2pm88sdf92
  • SHA256 00f18e515f076e1b327e90ff4eebe344b1bb4e30ac362700004b5bbc681783f7
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • cryptbot

C2
  • http://luaobe32.top/gate.php

Attributes
  • payload_url

    http://watibt04.top/prefab.dat

Signatures

File Explorer

  • 880-78-0x0000000000400000-0x00000000004D7000-memory.dmp
    .exe 860KB

880-78-0x0000000000400000-0x00000000004D7000-memory.dmp

  • SHA256 00f18e515f076e1b327e90ff4eebe344b1bb4e30ac362700004b5bbc681783f7
  • MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
52220
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths