General

  • Target

    2028-83-0x0000000000400000-0x00000000004CC000-memory.dmp

  • Size

    816KB

  • MD5

    b0db6a751328225fad89f2b10eedcb0c

  • SHA1

    4ca088284abf2e4f08fd9a3f5706566645f538f4

  • SHA256

    cdf256f6a714e539a54952df7524f277d079606bbfb6c108b34fc17d268c0b15

  • SHA512

    4203e7c87bfd244c384607a97b8f5a9bbb17571a43aa6308b517f0d2be10394dbc6ebd893aa680306a5f84e99c7a3851ec1e8ed717e9dc1e3c23f996435c7e6d

  • SSDEEP

    24576:pQPPMJA5eeG94zr8XIiaBxgvwsAoFzhguHtW:pQPdtrTiixoA2tW

Score
10/10

Malware Config

Extracted

Family

cryptbot

C2

http://lahlra52.top/gate.php

Attributes
  • payload_url

    http://ahohpl07.top/geomys.dat

Signatures

Files

  • 2028-83-0x0000000000400000-0x00000000004CC000-memory.dmp
    .exe windows x86


    Headers

    Sections