Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2272-3-0x0000000000A00000-0x000000000162A000-memory.dmp

  • Size

    12.2MB

  • MD5

    6a5a874fcb2994479ddfa3acbf063885

  • SHA1

    c6970d8ab5b39cdd9065c52a5f82e619c934a44f

  • SHA256

    e541eb7d5fcf320ed01abecc05c1760480a025269d242452499bfc73be14d0db

  • SHA512

    5c5bbb25abb0bc01f9035f3b31ede08eccbfa721a8a1614fc135e6c7c331c53d8369ba01900bc121876fcc8442cd57e992582bec3db792262224975bbe63980f

  • SSDEEP

    98304:6eCzYtJziU1cKQgUz5upbKFSyWutTkV8q5BlsbczXwyb/hZHLTXcBTWxyFl:iUz1NDrbcbcVZrTUT

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2272-3-0x0000000000A00000-0x000000000162A000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections