Resubmissions

01/10/2024, 14:05

241001-rd5n2axcrc7

01/10/2024, 14:03

241001-rct6xashpl10

01/10/2024, 13:36

241001-qwjzlssblq7

General

  • Target
    Set-up.exe
  • Size 9.5MB
  • Sample241001-rct6xashpl
  • SHA256 cff579e5facdd493e0b023979049f4504ffc611c352a7d97928943e61c66dd0d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • cryptbot

Targets

    • Target
      Set-up.exe
    • Size 9.5MB
    • SHA256 cff579e5facdd493e0b023979049f4504ffc611c352a7d97928943e61c66dd0d
    • MD5 SHA1 SHA512 SSDEEP
    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks