Analysis
-
max time kernel
119s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
15/03/2024, 00:32
General
-
Target
ca07dd5bfa53eea811b2e4608792be0c.exe
-
Size
667KB
-
MD5
ca07dd5bfa53eea811b2e4608792be0c
-
SHA1
49a7a0a73f7b5af40af30c8107833035567e2a76
-
SHA256
9c409df92867a210bba9c3de29296c54222a9342e7e992392f75456e4a86e7a5
-
SHA512
096d2974c3263c38463e9f7cbc1158afa13f41ed26ae00f8f155470dddd03b485e30f2839621e74fe146778adf8cbb0f3d3e41beeb6e1cd9dffba8135ed0f290
-
SSDEEP
12288:o1sHawM5GW8l91jP6xQMf4hbcpWfGE1VKuK6xtKXEbkRXgN3f0zkqlTxK3V1ec:oOawMkW8lHjy6Mf45cpMKu/aXEbkpY0+
Score
10/10
Malware Config
Extracted
Family
cryptbot
C2
bunmud42.top
morluw04.top
Attributes
-
payload_url
http://tobepw05.top/download.php?file=lv.exe
Signatures
-
CryptBot
A C++ stealer distributed widely in bundle with other software.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ca07dd5bfa53eea811b2e4608792be0c.exe"C:\Users\Admin\AppData\Local\Temp\ca07dd5bfa53eea811b2e4608792be0c.exe"1⤵
- Checks processor information in registry
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
528KB
-
Filesize
528KB
-
Filesize
940KB
-
Filesize
41.2MB
-
Filesize
41.2MB
-
Filesize
528KB
-
Filesize
940KB
-
Filesize
41.2MB