Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
14/09/2024, 16:54
General
-
Target
c402655392179bed9d552b2d6fe81a40N.exe
-
Size
6.4MB
-
MD5
c402655392179bed9d552b2d6fe81a40
-
SHA1
5472eec9d0fefccb174f812d5e4a6d7bb63427b1
-
SHA256
1fb34cfee71fb9806f75f076155a3cc4391cbea4a43902968fc03c7bba79b072
-
SHA512
f4d0fcf5053d666216a2b3fc55360aab8073094216c06cf9c15a752bd30ce583d991f727734363dae825bfa7c11de1a9be3a555372fb7bf630d438e08af20c9b
-
SSDEEP
98304:n+djL0vkuNP8OVGGv0o0GuFwEUwm64BtbJ70x6:nIXPuNkRGp0/UagByx6
Score
10/10
Malware Config
Extracted
Family
cryptbot
C2
onev1pn.top
analforeverlovyu.top
Attributes
-
url_path
/v1/upload.php
Signatures
-
CryptBot
CryptBot is a C++ stealer distributed widely in bundle with other software.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c402655392179bed9d552b2d6fe81a40N.exe"C:\Users\Admin\AppData\Local\Temp\c402655392179bed9d552b2d6fe81a40N.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12.4MB