Resubmissions

09-10-2024 13:09

241009-qd4w3aveqq 10

06-10-2024 17:01

241006-vjjkjavdnq 7

General

  • Target

    Set-up.exe

  • Size

    6.0MB

  • Sample

    241009-qd4w3aveqq

  • MD5

    12d5fa98ac8df2269cd67123ddafd2c0

  • SHA1

    5f0c09ce3d119870210cd9219a5522aa7a206cb3

  • SHA256

    65421350e574e37c5422387c8e16dcbaebf439878434d8983c5f45cb40dc3477

  • SHA512

    ea7d599dcd3ce9ac58e41904fcee9ab0ce1c0cb8d7761e0ded057b8daa81431514cf62b02522902a49038f799bbdd4e459530b129a211ef195020fbdc342929e

  • SSDEEP

    49152:FlJawxt6jH2SSOmKL1u0SMrC8hGJwMk/JkQtdyaqiTDMAwEV9iyP7r74oBxBxaum:vJavjH21CRu0Tr1Mk

Malware Config

Targets

    • Target

      Set-up.exe

    • Size

      6.0MB

    • MD5

      12d5fa98ac8df2269cd67123ddafd2c0

    • SHA1

      5f0c09ce3d119870210cd9219a5522aa7a206cb3

    • SHA256

      65421350e574e37c5422387c8e16dcbaebf439878434d8983c5f45cb40dc3477

    • SHA512

      ea7d599dcd3ce9ac58e41904fcee9ab0ce1c0cb8d7761e0ded057b8daa81431514cf62b02522902a49038f799bbdd4e459530b129a211ef195020fbdc342929e

    • SSDEEP

      49152:FlJawxt6jH2SSOmKL1u0SMrC8hGJwMk/JkQtdyaqiTDMAwEV9iyP7r74oBxBxaum:vJavjH21CRu0Tr1Mk

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Detects CryptBot payload

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks