Overview

overview

10

Static

static

10

2548-3-0x0...ry.exe

windows7-x64

1

2548-3-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2548-3-0x0000000000880000-0x0000000001500000-memory.dmp

  • Size

    12.5MB

  • MD5

    5e06d26a99a42d79e883899d10078bfd

  • SHA1

    683f3cc97e8904ef3aa0cd602ebc22267bcc795e

  • SHA256

    c2e04c786420c5dcf02dca226c89475e1b431508842a49ba3f17c379fab32cdd

  • SHA512

    da23c337606abf59de4efb949da9244fc90a85dd1a7db66e7b856c908da787787498119e97f9fac20c180fe14a07dbed9b5f588a72859742041313fdf01bf711

  • SSDEEP

    98304:2VXdsAck/q4dxcEYOGOrf0X5KBk1G+FgD9l0v/kLIc2Z9mbweJr7yd3:HAf/5RxU5C0EL32ZF0

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2548-3-0x0000000000880000-0x0000000001500000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections