Overview

overview

10

Static

static

3

57d2d683bb...0N.exe

windows7-x64

10

57d2d683bb...0N.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    16-10-2024 23:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    57d2d683bb5a981123fa5d3bd4b6eee6e6a89f67c73dbbe5c46833c3a68dc910N.exe

  • Size

    6.4MB

  • MD5

    ed24abd1b09805d17c8a70b02680b9c0

  • SHA1

    1254998d8fb91d2aae9c7e03035aae5c2c5453a6

  • SHA256

    57d2d683bb5a981123fa5d3bd4b6eee6e6a89f67c73dbbe5c46833c3a68dc910

  • SHA512

    8a1913aecae3a334c7f92cbe1d9636c102405ed108575a40a308d328c204e04ef83de70260bf76d0a463c0fb2af5ab75db2ea58fc3f955bccf194847c227e92a

  • SSDEEP

    49152:rwB93DVYEC7kl6sDh81O+6dAz39UomcOdoIf5B/mQ4+K/si4hX/8BuF/hUl1Z/tb:LJQo04+K8EInUlT//Wh1LRECgvvilS

Score
10/10
cryptbotdiscoveryspywarestealer

Malware Config

Extracted

Family

cryptbot

C2

forvf14ht.top

analforeverlovyu.top
Attributes
  • url_path

    /v1/upload.php

Signatures

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\57d2d683bb5a981123fa5d3bd4b6eee6e6a89f67c73dbbe5c46833c3a68dc910N.exe
    "C:\Users\Admin\AppData\Local\Temp\57d2d683bb5a981123fa5d3bd4b6eee6e6a89f67c73dbbe5c46833c3a68dc910N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:340

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/340-0-0x0000000000400000-0x000000000106D000-memory.dmp

    Filesize

    12.4MB

    Download