Overview

overview

10

Static

static

10

2400-3-0x0...ry.exe

windows7-x64

1

2400-3-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2400-3-0x00000000003C0000-0x0000000001037000-memory.dmp

  • Size

    12.5MB

  • MD5

    f4eff2498ede0fe5bc7b2b91bc1d3af1

  • SHA1

    6bf544ed1a5b5a3ab22114f208b4c342999e20ef

  • SHA256

    95e4279f80218950749a7fcc283869327095e9fbfe5f5d9b3ab220d71d28177a

  • SHA512

    38e7d3ee2d7521a2eed634b6ced15841601e8a5b7eb167cd0abe3411b380d1d7d67041d708a33ff264a442e14083274fcc3d2d06ce89fc7c0cda3ae134e5d16c

  • SSDEEP

    98304:rRi6pMsS4BBTTeOwJ+0uq6c3GBx+HEgHDBKf3tT+FxgLmVNYggFarpjQZSBnQV6t:x6sS4BBTTedJ9H8u1WOXyyQ1NA

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2400-3-0x00000000003C0000-0x0000000001037000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections