Overview

overview

10

Static

static

10

1352-3-0x0...ry.exe

windows7-x64

1

1352-3-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1352-3-0x0000000000370000-0x0000000000FB1000-memory.dmp

  • Size

    12.3MB

  • MD5

    96bb856c4fcdea372c5f4b9cd61813d4

  • SHA1

    12df598ffd97b35e6bd95458f98cc8a1af19ba02

  • SHA256

    db9aa550b2d98376011f3bf50a9890599da30d6ce5763e4a1c24a4fa5c05efb9

  • SHA512

    07224c10cb0870ec6a1391b153476cc791bbb370181f1a4316bdce3eefd067cdb1ea9e78f2f77b956c6abe221cb562e6cf737e8581cb9e3243c4c66fbae2222b

  • SSDEEP

    196608:cwMa+ld2BJ/nrrkvUvAFtbfUs9K+T1Mtl7kl:c5N2Bl/0UYFlUuJ

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1352-3-0x0000000000370000-0x0000000000FB1000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections