cryptbot | 7178bba0d8a49e05390d2aeeb204168f646dc3d3869a09743729fd8b4f1cc7ed | Triage

Sharing

General

Target

7178bba0d8a49e05390d2aeeb204168f646dc3d3869a09743729fd8b4f1cc7ed
Size

6.7MB
Sample

241010-b8w3datglf
MD5

b8502772517c16c3598eb34e93fb0f0b
SHA1

1fb95773e328e01306ad5294ba7125c493285a33
SHA256

7178bba0d8a49e05390d2aeeb204168f646dc3d3869a09743729fd8b4f1cc7ed
SHA512

6bf9aa089fe86f82fc2e8246fb38894a97b8435516b570d98507ecc199318daff5e6310b6e2bc18c6d68b0a1c8e65e0dce6aa3a67cbf472bbf7e05cf45c57ea5
SSDEEP

49152:6V0xEegdgUyeNRNX4felwZbxF9pNau3FXnojv7AmOHXnXE0B9tFKa:jaFd1xTX4f+whxjpNautnI8

Score

10^/10

cryptbot discovery spyware stealer

Malware Config

Targets

- Target
  
  7178bba0d8a49e05390d2aeeb204168f646dc3d3869a09743729fd8b4f1cc7ed
- Size
  
  6.7MB
- MD5
  
  b8502772517c16c3598eb34e93fb0f0b
- SHA1
  
  1fb95773e328e01306ad5294ba7125c493285a33
- SHA256
  
  7178bba0d8a49e05390d2aeeb204168f646dc3d3869a09743729fd8b4f1cc7ed
- SHA512
  
  6bf9aa089fe86f82fc2e8246fb38894a97b8435516b570d98507ecc199318daff5e6310b6e2bc18c6d68b0a1c8e65e0dce6aa3a67cbf472bbf7e05cf45c57ea5
- SSDEEP
  
  49152:6V0xEegdgUyeNRNX4felwZbxF9pNau3FXnojv7AmOHXnXE0B9tFKa:jaFd1xTX4f+whxjpNautnI8
Score

10^/10

cryptbot discovery spyware stealer
- CryptBot
  CryptBot is a C++ stealer distributed widely in bundle with other software.
  spyware stealer cryptbot
- Detects CryptBot payload
  CryptBot is a C++ stealer distributed widely in bundle with other software.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cryptbotdiscoveryspywarestealer

behavioral2

cryptbotdiscoveryspywarestealer