Overview

overview

10

Static

static

10

2196-528-0...ry.exe

windows7-x64

1

2196-528-0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2196-528-0x0000000000CE0000-0x0000000001944000-memory.dmp

  • Size

    12.4MB

  • MD5

    22315ad59d104cb2ef17edb5d4281104

  • SHA1

    9646c59ac453ed8a58d60885ca16a522cba517ca

  • SHA256

    76c09aff2ae3b8a89a5cdb90fbc642a45573f9c6cf1348959bee7b2b3725e8f2

  • SHA512

    b79f26834b36ec2429560aa968e0c8c9f8618dd7f2aecd6d94cb49915825a336b3bbddb89ab7a27d160f05db297d038cc346668764391e4a7c730b147930e16a

  • SSDEEP

    98304:E0mUM7L2Bc07DYsWXbK57K62QMRR4lA0AWNftVv2V7dm9D/4ija7X9D1C:dSqP/F73ftVOV7s9laphC

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2196-528-0x0000000000CE0000-0x0000000001944000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections