Analysis
-
max time kernel
151s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-en-20220113 -
submitted
26-02-2022 08:23
General
-
Target
59181336c7ed4b4152b83793f7ea9eae.exe
-
Size
735KB
-
MD5
59181336c7ed4b4152b83793f7ea9eae
-
SHA1
5d91e0530c6ca8fbb7a35bed48c9865a599d1838
-
SHA256
f90eb82d70118fb18f44f8ecb33682baf047ef857210c57a7016b8794e2a94cd
-
SHA512
a8c32e5d520698b8519310393501ed9bceb4ecb5cd4bec8d0aa2743cc425cbcb52d62730d46906c4c79294a9b4ef5ec64872fd95fdb24f5eb313f89ce0bac585
Malware Config
Extracted
cryptbot
bridmz52.top
Signatures
-
CryptBot
A C++ stealer distributed widely in bundle with other software.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\59181336c7ed4b4152b83793f7ea9eae.exe"C:\Users\Admin\AppData\Local\Temp\59181336c7ed4b4152b83793f7ea9eae.exe"1⤵
- Checks processor information in registry
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
284KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
208KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB