General

  • Target

    1524-87-0x0000000000400000-0x00000000004CC000-memory.dmp

  • Size

    816KB

  • MD5

    3c61354ba680c735b3c5162e719cf04d

  • SHA1

    c5b8df65d95f68cc3e9524305df51354412f106b

  • SHA256

    cff473cf9ddd2cc651e2058928c255cd8e23266ab517478aa20f2ca7d1566c3a

  • SHA512

    627f62b3806a06cb34c2848b922b1b33cd68ea061941bd1ebc803831cfeebc6167436cbefd2f7393da8b0381f69529ec1dd6c5d90774790b8a41740e263187bc

  • SSDEEP

    24576:pQPPMJA5eeG94zr8XIiaBxgvwsAqFzhHtW:pQPdtrTiixqPtW

Score
10/10

Malware Config

Extracted

Family

cryptbot

C2

http://xjupom52.top/gate.php

Attributes
  • payload_url

    http://rymhdi07.top/zither.dat

Signatures

Files

  • 1524-87-0x0000000000400000-0x00000000004CC000-memory.dmp
    .exe windows x86


    Headers

    Sections