Overview

overview

10

Static

static

10

3340-573-0...ry.exe

windows7-x64

1

3340-573-0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3340-573-0x00000000008B0000-0x000000000153B000-memory.dmp

  • Size

    12.5MB

  • MD5

    4ccbd99155935fc9e01aa4f41234440d

  • SHA1

    8c8c069c809773361b09a129ae9eead8485cdc27

  • SHA256

    210996c74d1c400a3c649e47d5c01574e49391c1b5d6357173b8dbab4f0758c5

  • SHA512

    bf22843ea6653e5497c78a08a2afc56e325a0f83ab09c913f4231a5fab83fb1efb96b6ed89d017b9d6b62de3fc67a998346cd938dc38d75a97774c0b003200a4

  • SSDEEP

    98304:yZfrPRXKZwCw8Uwkq/7YqgaDpKXg00UDpdY3xUQQKXM7giq/NvftDi4D:opXMwlwpyaDpMdY3xUQT87ElV

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3340-573-0x00000000008B0000-0x000000000153B000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections