Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2532-754-0...ry.exe

windows7-x64

2532-754-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2532-754-0x00000000002F0000-0x0000000000F98000-memory.dmp

  • Size

    12.7MB

  • MD5

    12f7c02a4a31fb084c4b7a31cc0d9ddc

  • SHA1

    43f66199c8d256a8694fc32483e8c78293e6f00b

  • SHA256

    25e85eade4b091b15ac48499ac23d406f64bf01b3ad1a53d507788b6731d5060

  • SHA512

    eb049c360c40c616482af7916b946c34791c33981d21b4be58ca07c53c1f82a925eeb5272398cf88369206f8837c70182f6ccfa5e009ead93316d2dce5b3ea51

  • SSDEEP

    98304:icLH8UMkhm5cfxTSNhJqpF0XK/Wiv+3zxsP0aZz1yZU:VXMu9dmXZA8Z

Score
10/10
spywarestealercryptbot

Malware Config

Extracted

Family

cryptbot

C2

http://home.fivecc5vs.top/RkxPTSBLYxNxxrPaLizI17

Signatures

  • Cryptbot family
    cryptbot
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2532-754-0x00000000002F0000-0x0000000000F98000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections