General

  • Target

    8e55a07b9a3056a77b85b712d059e878ca3e455f2c32c8092f7427661db0912a

  • Size

    6.1MB

  • Sample

    241010-b9ejqazcmq

  • MD5

    164871e8a7c72bdb0ebf20c193dbff3c

  • SHA1

    1c89456d6e1adae583dc027fee30f3a5c77f4375

  • SHA256

    8e55a07b9a3056a77b85b712d059e878ca3e455f2c32c8092f7427661db0912a

  • SHA512

    cbf5d6801490d905eab663ebb19c3a74342a6db3b141824cec93ed396319c8274fd6615ff20f2a4a4336be7fac5d974444ff4ee7dfe61255bd7aaff6afbf5290

  • SSDEEP

    196608:X6Egxp0t/VGQviUFD4JEqG8PgCMEzhUK6HhMz89E70Y:X6Egxp0t/VGQviUFDmEqG8PgCMEzhUN7

Malware Config

Targets

    • Target

      8e55a07b9a3056a77b85b712d059e878ca3e455f2c32c8092f7427661db0912a

    • Size

      6.1MB

    • MD5

      164871e8a7c72bdb0ebf20c193dbff3c

    • SHA1

      1c89456d6e1adae583dc027fee30f3a5c77f4375

    • SHA256

      8e55a07b9a3056a77b85b712d059e878ca3e455f2c32c8092f7427661db0912a

    • SHA512

      cbf5d6801490d905eab663ebb19c3a74342a6db3b141824cec93ed396319c8274fd6615ff20f2a4a4336be7fac5d974444ff4ee7dfe61255bd7aaff6afbf5290

    • SSDEEP

      196608:X6Egxp0t/VGQviUFD4JEqG8PgCMEzhUK6HhMz89E70Y:X6Egxp0t/VGQviUFDmEqG8PgCMEzhUN7

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Detects CryptBot payload

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks