Overview

overview

10

Static

static

10

2104-3-0x0...ry.exe

windows7-x64

1

2104-3-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2104-3-0x0000000000990000-0x0000000001606000-memory.dmp

  • Size

    12.5MB

  • MD5

    7c619081fdce71df9f9fe4fc21c7188b

  • SHA1

    05c57f2664ece0867a42f0567b85cc67a7b6ff76

  • SHA256

    738ab489e4780158dc48bd7925c161aefe7a34f7a7c8b7ca1aeedda55e847be5

  • SHA512

    7c8afdc3eaae86b5104d8f4392689f374e496cdeb23264361db51d257e017210b525bf483d66b0be4543e5250fda6cd69e8699087f8d978f745d2e40dd038444

  • SSDEEP

    98304:Amjvu8jIbc78RL3S5xannJP5ZK1ztfJNS9d8nRQUzob/gGx4aOZL95ecA5glw:9tjE5jRnJBZqnGx4ZZzBA5gl

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2104-3-0x0000000000990000-0x0000000001606000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections