General

  • Target

    262448352a09eb1da2f969f825c849cce7ec7dbcb79deda59611ca94fa7f099b

  • Size

    134KB

  • MD5

    56735bfaafb1597fa6a904a11e373d2c

  • SHA1

    11ed0afcbd705607a663ac6b299939c3a9864c76

  • SHA256

    262448352a09eb1da2f969f825c849cce7ec7dbcb79deda59611ca94fa7f099b

  • SHA512

    0058d7eea12be04056ed79ec61234833cdc011be75fdfaf37dcf72d9bb7c7695488896d2e7cbf8f88056b228c6f1141eca4db047dfffe72903107e5d30363014

  • SSDEEP

    3072:xPfUETU+8N8acM2Ol/tniEjS97Mn8/4toQRSdqoNMu8dEUPhzMvYv:xnU3/BtiEu97Q8UoQoY5rdpZgQv

Score
10/10

Malware Config

Extracted

Family

cryptbot

C2

unic16m.top

unic16e.top

Signatures

  • Cryptbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 262448352a09eb1da2f969f825c849cce7ec7dbcb79deda59611ca94fa7f099b
    .zip

    Password: infected

  • 381333799197cdf21b4d12d9ce83587673c52b336547a5425bbd9c69bba00d5f.exe
    .exe windows:6 windows x86 arch:x86

    5e83a2a4f8bd496b2fc660065aba6076


    Headers

    Imports

    Sections