General

  • Target

    7390d4b623389f2238b17b94e6de42d7.exe

  • Size

    744KB

  • Sample

    220226-j96bfaaag5

  • MD5

    7390d4b623389f2238b17b94e6de42d7

  • SHA1

    5f49bfbad45dfa04f510abe85c5cf56c5ddadfb1

  • SHA256

    a3790ffc270f68f6148736aaa154fc226ba600bdf5f07254998d17b8b4c99746

  • SHA512

    22b74f1b62981cdaa2d072e03de916bc52bf8893c28b3b722c6bc3ec8ad75fbce785665714ed25bb67b40b6028e8cc77c8ea0f9176cc2f810a607e568e82b05e

Malware Config

Extracted

Family

cryptbot

C2

bridmz52.top

Targets

    • Target

      7390d4b623389f2238b17b94e6de42d7.exe

    • Size

      744KB

    • MD5

      7390d4b623389f2238b17b94e6de42d7

    • SHA1

      5f49bfbad45dfa04f510abe85c5cf56c5ddadfb1

    • SHA256

      a3790ffc270f68f6148736aaa154fc226ba600bdf5f07254998d17b8b4c99746

    • SHA512

      22b74f1b62981cdaa2d072e03de916bc52bf8893c28b3b722c6bc3ec8ad75fbce785665714ed25bb67b40b6028e8cc77c8ea0f9176cc2f810a607e568e82b05e

    • CryptBot

      A C++ stealer distributed widely in bundle with other software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks