General
-
Target
51c9d8f09a73802a05455e7aa8fd9953
-
Size
1.4MB
-
Sample
240110-2ese7shear
-
MD5
51c9d8f09a73802a05455e7aa8fd9953
-
SHA1
6510caf6fe4f5069acde292851de1c259ffe1c3f
-
SHA256
e2d38fff6489893582da7827bf3f5179f7ced39a1391f736ea55d86b695b8e82
-
SHA512
3f865ce110a852cd0c1e88c4697d9c6fbd6fb403cf418a8f40a4375c6547d0069e40edbe04ced3c61d03c723167b8994dfcd3dcccccc5be6b9e94e8366025fd8
-
SSDEEP
24576:MNAdKxA6xbbGhL56y6kX7wHkQaa9aA7CEbAj6tP4lWqDCbtOgbSekUhKuzfv:3dKa6xfGhL54kDuaAm4w52lGXxgX
Static task
static1
Behavioral task
behavioral1
Sample
51c9d8f09a73802a05455e7aa8fd9953.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
51c9d8f09a73802a05455e7aa8fd9953.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
cryptbot
lyswug41.top
morbyn04.top
-
payload_url
http://damhlu05.top/download.php?file=lv.exe
Targets
-
-
Target
51c9d8f09a73802a05455e7aa8fd9953
-
Size
1.4MB
-
MD5
51c9d8f09a73802a05455e7aa8fd9953
-
SHA1
6510caf6fe4f5069acde292851de1c259ffe1c3f
-
SHA256
e2d38fff6489893582da7827bf3f5179f7ced39a1391f736ea55d86b695b8e82
-
SHA512
3f865ce110a852cd0c1e88c4697d9c6fbd6fb403cf418a8f40a4375c6547d0069e40edbe04ced3c61d03c723167b8994dfcd3dcccccc5be6b9e94e8366025fd8
-
SSDEEP
24576:MNAdKxA6xbbGhL56y6kX7wHkQaa9aA7CEbAj6tP4lWqDCbtOgbSekUhKuzfv:3dKa6xfGhL54kDuaAm4w52lGXxgX
Score10/10-
CryptBot payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-