Overview

overview

10

Static

static

10

2688-3-0x0...ry.exe

windows7-x64

1

2688-3-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2688-3-0x00000000010E0000-0x0000000001D67000-memory.dmp

  • Size

    12.5MB

  • MD5

    6e32b7c04aff3f6d2ca2eee52950f360

  • SHA1

    ccd57bfd4319bd2f2cfeb7d243934e872220ae2a

  • SHA256

    e5b86005c7c0889035189ebb6b1e42cf2a35fe87a802bee5daeba0e8e90e57a9

  • SHA512

    996156ffa69e22c43bb6d3b5086c58a5d691fb58ac4f983ad823cc7abbdfa64660564eb87ff4a6eed753daf1967835c9c25330eec0afa350474ef3380856a39e

  • SSDEEP

    98304:LFz6Bpv/scgXXD2lSxsWgzkmKiN5dp1gw8BJ/WlK4ks/BPOyxrbu01hdKkTI2up0:UHXUMSTmHBPt+5hd5MxLZieGK

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2688-3-0x00000000010E0000-0x0000000001D67000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections