Overview

overview

10

Static

static

10

1804-3-0x0...ry.exe

windows7-x64

1804-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1804-3-0x0000000000250000-0x0000000000DB2000-memory.dmp

  • Size

    11.4MB

  • MD5

    51412b6c0b6c3775e8ae6d3fcfaffc19

  • SHA1

    f48c6dc1b359e62a90d777e3281a7248a7d9119b

  • SHA256

    46b0fb503215e6e249c9ab4094c2bebe370cb33564d3ed8b5563fa102b51b9b5

  • SHA512

    8f38c9a92b1c40ebc25e46d9669a9919f3f21b747b41dbfbd48fedda31e2330b4e3ce3bb2e0ccb7eab489416eefcc4bf4d44fe0cc4d135a9d6af800dd1988c73

  • SSDEEP

    98304:e9gCgiW8AkUcQknP8rWFxvCKWLDucAl4iTGjFbdLyBTwklRiwGr:ShWX7YVClRLyBTwklRiw

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

C2

http://home.fivepp5sb.top/joLepLgSzIBRhlkJbQYx17

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1804-3-0x0000000000250000-0x0000000000DB2000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections