Overview

overview

10

Static

static

10

2692-3-0x0...ry.exe

windows7-x64

1

2692-3-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2692-3-0x00000000001B0000-0x0000000000E1E000-memory.dmp

  • Size

    12.4MB

  • MD5

    f99c08050b0b37ad5ea0bc0026c96b9a

  • SHA1

    003dfa7940a4db2b1654e5404f5824a7febc7023

  • SHA256

    9e43d2c25a06184ac7e2e72c17be4900657243f90b6e5cd3b677f679322ba7da

  • SHA512

    6d41a42188e4f4c25d055b330e6cfe3d115eedd8b1886ead60c1e196e4c3907c1b50d1a42c0888f337b5b298580a470395c0684bada00b9df290b32102bca1c9

  • SSDEEP

    98304:fNY/ms4KlrJySPcSbc7YYnUHJBcKumyH3I6XiLphh0cfqY2KPuWtnAD:uR4orJvoKvcgqf7WtnAD

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2692-3-0x00000000001B0000-0x0000000000E1E000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections