General

  • Target

    2004-70-0x0000000000400000-0x00000000004CC000-memory.dmp

  • Size

    816KB

  • MD5

    7562029bd495a94d3c1000155717ac9b

  • SHA1

    4e332fea7d6e6edaa159a3a91ef1e722c18eea0f

  • SHA256

    65c277ca5ba40e11db36dc51fdfd036ef9778c55edea6a8e98c9b6ba04a2b1b6

  • SHA512

    922f4b2cbbf8dc90ad790f46e1aebf718e0ae890a4bb777f3de2a960040f6ce0b7da0337ff060ca2cb21e591daae732d9dc3e2354b4d763d3aede85ff79b8791

  • SSDEEP

    24576:pQPPMJA5eeG94zr8XIiaBxgvwsAPFz0gSHtW:pQPdtrTiixPXytW

Score
10/10

Malware Config

Extracted

Family

cryptbot

C2

http://lahlra52.top/gate.php

Attributes
  • payload_url

    http://ahohpl07.top/geomys.dat

Signatures

Files

  • 2004-70-0x0000000000400000-0x00000000004CC000-memory.dmp
    .exe windows x86


    Headers

    Sections