Overview

overview

10

Static

static

10

2156-3-0x0...ry.exe

windows7-x64

2156-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2156-3-0x0000000000AB0000-0x00000000015FA000-memory.dmp

  • Size

    11.3MB

  • MD5

    4b0357c21fc29179a3c46b56a46bdeb6

  • SHA1

    4ed4fe7c278be06a577fa8f850bd3b132419efe1

  • SHA256

    5d974f7f2f3a670622174c6cd10fbf2469f5f56efaa3d1b2ab4eb3b84329dcc9

  • SHA512

    b1384eaa4aab56741549ea3c1b1fb454eb7fcc151f68cd69e0f02ffaf0de5cd251a66c69ae70fcc639e763a3e6150d950434e86590fc6f75ad9d1c3cf0cf1b77

  • SSDEEP

    98304:QklH3Udzyscq1lxILvwFxpp7WeKMWBK96gcFOnCGpttPtnCn7:pEN1rTxpp7p5g2tnE7

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2156-3-0x0000000000AB0000-0x00000000015FA000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections