General
-
Target
fcf7a9f612586c76b3597985dc5e2b79.exe
-
Size
637KB
-
Sample
210330-3ctml3n9da
-
MD5
fcf7a9f612586c76b3597985dc5e2b79
-
SHA1
4a75e27a1ed940a6f27f5f2bf316f7ebf95b0858
-
SHA256
126f515316ff7d1be06266adcbbd565f18437b293b690765dcf55f500cb048e0
-
SHA512
4b6d124d27599559f84eb340d3cd7cb577bb9ed6c86306d03c26e3c9a61f5a5a1d9b4e849305ab40cb2f79e3d23215c3081262c68bde4d028abed1bbe44719cb
Static task
static1
Behavioral task
behavioral1
Sample
fcf7a9f612586c76b3597985dc5e2b79.exe
Resource
win7v20201028
Malware Config
Extracted
cryptbot
bavyf72.top
moriol07.top
-
payload_url
http://akshj10.top/download.php?file=lv.exe
Targets
-
-
Target
fcf7a9f612586c76b3597985dc5e2b79.exe
-
Size
637KB
-
MD5
fcf7a9f612586c76b3597985dc5e2b79
-
SHA1
4a75e27a1ed940a6f27f5f2bf316f7ebf95b0858
-
SHA256
126f515316ff7d1be06266adcbbd565f18437b293b690765dcf55f500cb048e0
-
SHA512
4b6d124d27599559f84eb340d3cd7cb577bb9ed6c86306d03c26e3c9a61f5a5a1d9b4e849305ab40cb2f79e3d23215c3081262c68bde4d028abed1bbe44719cb
-
CryptBot Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-