cryptbot | 88d45e633f5890422c9e3059069950e52d59de9ece10462cac8ab2499f3e0a52 | Triage

Sharing

General

Target

88d45e633f5890422c9e3059069950e52d59de9ece10462cac8ab2499f3e0a52
Size

6.5MB
Sample

241013-afy6laygma
MD5

59ef2e4cb1ba2ecc1489e672fb932eba
SHA1

7625af5368aa52bed2a7763101d361e5642251de
SHA256

88d45e633f5890422c9e3059069950e52d59de9ece10462cac8ab2499f3e0a52
SHA512

a77df61522b0c8e2862b23c08bafdb48c0c858f3df65e5e20329712fa597d8e64aae6fe45579e2c642050ffe3067cfd3d8e289e1a64696cfd9cec3a5ef2f3e37
SSDEEP

49152:41e6ImKJWKDg2xKRfi/4w7AfmIa1WAR9fq6nDzDwg5J5pWGjrbQoYQBRy+ueXHww:4EmKJW4FQpnw7AfmIl0

Score

10^/10

cryptbot discovery spyware stealer

Malware Config

Targets

- Target
  
  88d45e633f5890422c9e3059069950e52d59de9ece10462cac8ab2499f3e0a52
- Size
  
  6.5MB
- MD5
  
  59ef2e4cb1ba2ecc1489e672fb932eba
- SHA1
  
  7625af5368aa52bed2a7763101d361e5642251de
- SHA256
  
  88d45e633f5890422c9e3059069950e52d59de9ece10462cac8ab2499f3e0a52
- SHA512
  
  a77df61522b0c8e2862b23c08bafdb48c0c858f3df65e5e20329712fa597d8e64aae6fe45579e2c642050ffe3067cfd3d8e289e1a64696cfd9cec3a5ef2f3e37
- SSDEEP
  
  49152:41e6ImKJWKDg2xKRfi/4w7AfmIa1WAR9fq6nDzDwg5J5pWGjrbQoYQBRy+ueXHww:4EmKJW4FQpnw7AfmIl0
Score

10^/10

cryptbot discovery spyware stealer
- CryptBot
  CryptBot is a C++ stealer distributed widely in bundle with other software.
  spyware stealer cryptbot
- Detects CryptBot payload
  CryptBot is a C++ stealer distributed widely in bundle with other software.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cryptbotdiscoveryspywarestealer

behavioral2

cryptbotdiscoveryspywarestealer