General

  • Target

    a37b311d3479b21e39edf427e3d58d5a

  • Size

    7.9MB

  • Sample

    231222-qqgmashbdk

  • MD5

    a37b311d3479b21e39edf427e3d58d5a

  • SHA1

    42bc52fa1300e10675473b0d65a8826457e18cdf

  • SHA256

    f20827e75c6d4bde0abb5f8626d36c47d4268ec74e0731f78bf3e7c494fca84d

  • SHA512

    7b2dd988241ca2cf9cbd7be312a8ce09166cb90895659feda0f8562f32b80c56de3aa9fd597b9ecf1f0c7d5103659b599510793655403dfe6bea60e45371058c

  • SSDEEP

    196608:tVACmlBHo8B2MXgRPWyk8dbKRBvVx1AxNx1W8C:MfLQMkPWD8d+BvPyn

Malware Config

Extracted

Family

cryptbot

C2

fokacv34.top

mortbo03.top

Attributes
  • payload_url

    http://nybaer04.top/download.php?file=lv.exe

Targets

    • Target

      a37b311d3479b21e39edf427e3d58d5a

    • Size

      7.9MB

    • MD5

      a37b311d3479b21e39edf427e3d58d5a

    • SHA1

      42bc52fa1300e10675473b0d65a8826457e18cdf

    • SHA256

      f20827e75c6d4bde0abb5f8626d36c47d4268ec74e0731f78bf3e7c494fca84d

    • SHA512

      7b2dd988241ca2cf9cbd7be312a8ce09166cb90895659feda0f8562f32b80c56de3aa9fd597b9ecf1f0c7d5103659b599510793655403dfe6bea60e45371058c

    • SSDEEP

      196608:tVACmlBHo8B2MXgRPWyk8dbKRBvVx1AxNx1W8C:MfLQMkPWD8d+BvPyn

    • CryptBot

      A C++ stealer distributed widely in bundle with other software.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

MITRE ATT&CK Matrix

Tasks