Resubmissions

10/06/2022, 17:27

220610-v1ye1saag410

12/04/2022, 15:01

220412-sdvdqscgep10

General

  • Target
    884266406f11e034de97c494abd1106a.exe
  • Size 347KB
  • Sample220610-v1ye1saag4
  • SHA256 328132c92e6b42bd191853561730acf00f4a4dd056b8bbd872cdae394d391bc2
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • cryptbot

C2
  • poqvyg22.top

Targets

    • Target
      884266406f11e034de97c494abd1106a.exe
    • Size 347KB
    • SHA256 328132c92e6b42bd191853561730acf00f4a4dd056b8bbd872cdae394d391bc2
    • MD5 SHA1 SHA512
    • CryptBot

      A C++ stealer distributed widely in bundle with other software.

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks