Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21/09/2024, 01:37
General
-
Target
d06176d8dada517e04df25f3af5ebb2bd21a73c760ad52bd7229017dc07f0fa5.exe
-
Size
6.3MB
-
MD5
2849899711c4f5d177731749d4501b32
-
SHA1
d970407e6556b7714209b47a072e1265cbf73adf
-
SHA256
d06176d8dada517e04df25f3af5ebb2bd21a73c760ad52bd7229017dc07f0fa5
-
SHA512
208ac83fdec7b517f39c1a9866c2ead6833d324140021547b5af7d5da994576ba642fb8ec4acf8380a770060585b44b93ae2131f7b63788e7854f4af18d1d2ca
-
SSDEEP
196608:FXXuslVgrg9eG3skykIq0/RSz0weVb1DTKQe0bpDjpWB2v2FU78awBwSThuvk5ig:FXeslVgE9eG3HykIq0/Uz0weVJKi9Djq
Score
10/10
Malware Config
Extracted
Family
cryptbot
C2
fivevf5ht.top
analforeverlovyu.top
Attributes
-
url_path
/v1/upload.php
Signatures
-
CryptBot
CryptBot is a C++ stealer distributed widely in bundle with other software.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d06176d8dada517e04df25f3af5ebb2bd21a73c760ad52bd7229017dc07f0fa5.exe"C:\Users\Admin\AppData\Local\Temp\d06176d8dada517e04df25f3af5ebb2bd21a73c760ad52bd7229017dc07f0fa5.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12.4MB