General
-
Target
ce10256cacc5d041f174cd5f7329ac9b
-
Size
525KB
-
Sample
240316-pnrttaba2t
-
MD5
ce10256cacc5d041f174cd5f7329ac9b
-
SHA1
99fa0de878c2fd9533a854e9e60c292b2caa0ec0
-
SHA256
5e29c326f166fbdf28a5afa06b5fe91242ba2fa96e67d548cd5155b6e70b7fc5
-
SHA512
78e6868893406dd379ed21d71e640f496b1b6f17aab7185d73238341b0ced7539fefaa83757fa2fed395db87235779084055a8b1cd7e5bb48eaeb3ea9991ad39
-
SSDEEP
12288:tw511tljbZPZoLETaOelkrgUjdfFM1H1xTZL:mjbZPZWYelkxtFMl1xx
Static task
static1
Behavioral task
behavioral1
Sample
ce10256cacc5d041f174cd5f7329ac9b.exe
Resource
win7-20240221-en
Malware Config
Extracted
cryptbot
knuspj52.top
morjeo05.top
-
payload_url
http://sarefy07.top/download.php?file=lv.exe
Targets
-
-
Target
ce10256cacc5d041f174cd5f7329ac9b
-
Size
525KB
-
MD5
ce10256cacc5d041f174cd5f7329ac9b
-
SHA1
99fa0de878c2fd9533a854e9e60c292b2caa0ec0
-
SHA256
5e29c326f166fbdf28a5afa06b5fe91242ba2fa96e67d548cd5155b6e70b7fc5
-
SHA512
78e6868893406dd379ed21d71e640f496b1b6f17aab7185d73238341b0ced7539fefaa83757fa2fed395db87235779084055a8b1cd7e5bb48eaeb3ea9991ad39
-
SSDEEP
12288:tw511tljbZPZoLETaOelkrgUjdfFM1H1xTZL:mjbZPZWYelkxtFMl1xx
-
CryptBot payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-