Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

3740-151-0...ry.exe

windows7-x64

3740-151-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3740-151-0x0000000000590000-0x0000000001232000-memory.dmp

  • Size

    12.6MB

  • MD5

    b296b00c418d90383df2601eb74bb188

  • SHA1

    badf6a706cfade17f06bfc83afe966a2d652a657

  • SHA256

    06dc6715c2ed74ea5f6d2582c566001d1fd682ee1f8b0ee1fcb45eee197ff1d6

  • SHA512

    4b8d85c9db968f3deac9755c411819bc75f49b7687d86661fdbfeb7d401f02ebf7ac6df8e8d0a8ae051b2fce8cf78b50ae5349a1c79c2a5f25ff40b37f2aa75f

  • SSDEEP

    98304:4VjB0EPgDAnaakX/lHcNEoEpLOlfQu5bKTEm9cFaQqMCjBxL39QEB+T4:A3Y/OjTNa7xBQEBn

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

C2

http://home.fivecc5vs.top/RkxPTSBLYxNxxrPaLizI17

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3740-151-0x0000000000590000-0x0000000001232000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections