cryptbot | 9259b00bb10494cb883a4999ea33ff59452df9e09d2c30beafae09fd980b8baf | Triage

Sharing

General

Target

9259b00bb10494cb883a4999ea33ff59452df9e09d2c30beafae09fd980b8baf
Size

7.0MB
Sample

241010-b9jhnstgpa
MD5

506f20dc6d2d9a4bd2725a726679b74e
SHA1

9453e550623a28c48b31c9762b1d1b266be4dd9b
SHA256

9259b00bb10494cb883a4999ea33ff59452df9e09d2c30beafae09fd980b8baf
SHA512

51fc90c7cd00abfbd83055daada7c5f6003e353ce549702155f643c489f886d70cbacf6c97bf84ab0da1883a68df8574952b568d2e89212789c6b71119905821
SSDEEP

49152:o18FBWG6cBjNOL/SoDUVs7dxzg57AEgPQhaYkOr74oBxBRO+uaXHMEUs9N+qaKDJ:RBDBpi/SoDUVshx03wQA

Score

10^/10

cryptbot discovery spyware stealer

Malware Config

Targets

- Target
  
  9259b00bb10494cb883a4999ea33ff59452df9e09d2c30beafae09fd980b8baf
- Size
  
  7.0MB
- MD5
  
  506f20dc6d2d9a4bd2725a726679b74e
- SHA1
  
  9453e550623a28c48b31c9762b1d1b266be4dd9b
- SHA256
  
  9259b00bb10494cb883a4999ea33ff59452df9e09d2c30beafae09fd980b8baf
- SHA512
  
  51fc90c7cd00abfbd83055daada7c5f6003e353ce549702155f643c489f886d70cbacf6c97bf84ab0da1883a68df8574952b568d2e89212789c6b71119905821
- SSDEEP
  
  49152:o18FBWG6cBjNOL/SoDUVs7dxzg57AEgPQhaYkOr74oBxBRO+uaXHMEUs9N+qaKDJ:RBDBpi/SoDUVshx03wQA
Score

10^/10

cryptbot discovery spyware stealer
- CryptBot
  CryptBot is a C++ stealer distributed widely in bundle with other software.
  spyware stealer cryptbot
- Detects CryptBot payload
  CryptBot is a C++ stealer distributed widely in bundle with other software.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cryptbotdiscoveryspywarestealer

behavioral2

cryptbotdiscoveryspywarestealer