Overview

overview

10

Static

static

10

3052-3-0x0...ry.exe

windows7-x64

1

3052-3-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3052-3-0x00000000002C0000-0x0000000000EE9000-memory.dmp

  • Size

    12.2MB

  • MD5

    56c3d6484805d9e6d54c58338ab1e5e3

  • SHA1

    ea5a5c01453cd627a17314c3bdf9a43febe456c6

  • SHA256

    4bfe9c20aea78ba0284f533be2a1b57a20d5124977cf241c64067a871decf0c5

  • SHA512

    65e931f141bb4817f21e34bbd196b9a3074b4aa4bd9a9e25132afc104242fa9ae4d92195cd8f1ea1722b9e63fcd342fa809a7abcd017617b49158c42285bf0b7

  • SSDEEP

    98304:SOBEsulgCs6cbUPwMpOsyZqKNLplUvIbKyMv4ymioFziUAnVJGt:i9lpmUIBZqX0uQ9ioFfQJG

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3052-3-0x00000000002C0000-0x0000000000EE9000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections