Overview

overview

10

Static

static

10

a37b311d34...5a.exe

windows7-x64

10

a37b311d34...5a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a37b311d3479b21e39edf427e3d58d5a

  • Size

    7.9MB

  • MD5

    a37b311d3479b21e39edf427e3d58d5a

  • SHA1

    42bc52fa1300e10675473b0d65a8826457e18cdf

  • SHA256

    f20827e75c6d4bde0abb5f8626d36c47d4268ec74e0731f78bf3e7c494fca84d

  • SHA512

    7b2dd988241ca2cf9cbd7be312a8ce09166cb90895659feda0f8562f32b80c56de3aa9fd597b9ecf1f0c7d5103659b599510793655403dfe6bea60e45371058c

  • SSDEEP

    196608:tVACmlBHo8B2MXgRPWyk8dbKRBvVx1AxNx1W8C:MfLQMkPWD8d+BvPyn

Score
10/10
themidacryptbot

Malware Config

Extracted

Family

cryptbot

C2

fokacv34.top

mortbo03.top
Attributes
  • payload_url

    http://nybaer04.top/download.php?file=lv.exe

Signatures

  • Cryptbot family
    cryptbot
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a37b311d3479b21e39edf427e3d58d5a
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections