Overview

overview

10

Static

static

10

2600-202-0...ry.exe

windows7-x64

2600-202-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2600-202-0x0000000000110000-0x0000000000C5A000-memory.dmp

  • Size

    11.3MB

  • MD5

    facfd5753edf0e230d2625ba84001d47

  • SHA1

    d30615d0b72d94c0eb760e793722981d1d2460c5

  • SHA256

    fcc4b3b319fffbb48a79023a6aec4f582f80c7a71438585a7ac521c99aba53aa

  • SHA512

    621469e45c664bc15618aa3df497c4c845e0206a78b03684f736ca1ea6ac83a54182f1752e51d614a118a9b86c8cb9eaa40e7f767fcae31ccc49a2ac3ad3ca7d

  • SSDEEP

    98304:klYGxie78gZfJc49W8HhGMKZy9VC6WoKjBK96gcFOnCGpMN9UwngbJj:oxX7bNn9d6Zy9VC6nXggwnAj

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2600-202-0x0000000000110000-0x0000000000C5A000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections