Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

668-219-0x...ry.exe

windows7-x64

668-219-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    668-219-0x0000000001020000-0x0000000001CC2000-memory.dmp

  • Size

    12.6MB

  • MD5

    5a3043dd35a5754bf84b58248768a758

  • SHA1

    a6e6f301b11a1be79f85140c2b46ab9850fb58a5

  • SHA256

    5a1ff3c7324f7f0312892ad95c9c701cce049ce0c72b068f80df2e889d2ff2ee

  • SHA512

    ea08b9091d8a1e3e8bda5d2bedb6738e6fb9242347f20477197b2a166bd6eea57b7e07e42cf0f17f6b7589db30e4bad5f7b170f8c38d0f3718e3e078374ee26c

  • SSDEEP

    98304:2vSc5yf0sdWmc7X2WJ1JPjiFdKNEm9cFaQq+Vj/sj+oQlS+d4:2vk0KWFGrdwQs5QlSh

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

C2

http://home.fivecc5vs.top/RkxPTSBLYxNxxrPaLizI17

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 668-219-0x0000000001020000-0x0000000001CC2000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections