Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1700-3-0x0000000000280000-0x0000000000EEE000-memory.dmp

  • Size

    12.4MB

  • MD5

    f8b3dd71189ed360f27919fd303d8dac

  • SHA1

    8dda60b9ba1714883a2d81a3b80515d39a60d423

  • SHA256

    545d3297e21fc68340742f5ddd5cf5acf1b05f0fa988237b385423dd9251cc08

  • SHA512

    8f9514ea88ac7c4325841f3388752dea947e20132cf9d1d95b03e48579239216abd6dda0e633853ed57e4976e3a28a7a397f2128ed00b9b79b0cc4bb408a7c56

  • SSDEEP

    98304:5gR2k29/CNunlGcCUAhOLjHBZK3LpGMuOZhfeZtpbNyfjTV8blj0pUAY+zWIF6xK:1N9/4ulYv2ZifReZtpbkjxClj0ht5

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1700-3-0x0000000000280000-0x0000000000EEE000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections