cryptbot | 848f0c9d9f742eeb36857be8d554960cdce789559b338f09b74faf8ef1fc9fc9 | Triage

Sharing

General

Target

848f0c9d9f742eeb36857be8d554960cdce789559b338f09b74faf8ef1fc9fc9
Size

6.4MB
Sample

241021-q9zl8awere
MD5

04accfb0eb1cb0cf61934814be4bb2db
SHA1

d1c646fae4a4539cc4b6adc7b9a0bbe7bf552a68
SHA256

848f0c9d9f742eeb36857be8d554960cdce789559b338f09b74faf8ef1fc9fc9
SHA512

d0853775f6df11ac41097f2b5b929c1a2c7c7dcf2231d6b06ca8f744f523cef8f089af7dd9fe9205c14c2b326f609fcf4b4b7a582ba97bf722a0365090b21843
SSDEEP

49152:wz9n4EDyhoD8veiiDNHLMtY5lLPC+6s85l1dCSzbL7Y4dtCK6yjzcwAQptCy6brb:6CoYveiiDNg8

Score

10^/10

cryptbot discovery spyware stealer

Malware Config

Targets

- Target
  
  848f0c9d9f742eeb36857be8d554960cdce789559b338f09b74faf8ef1fc9fc9
- Size
  
  6.4MB
- MD5
  
  04accfb0eb1cb0cf61934814be4bb2db
- SHA1
  
  d1c646fae4a4539cc4b6adc7b9a0bbe7bf552a68
- SHA256
  
  848f0c9d9f742eeb36857be8d554960cdce789559b338f09b74faf8ef1fc9fc9
- SHA512
  
  d0853775f6df11ac41097f2b5b929c1a2c7c7dcf2231d6b06ca8f744f523cef8f089af7dd9fe9205c14c2b326f609fcf4b4b7a582ba97bf722a0365090b21843
- SSDEEP
  
  49152:wz9n4EDyhoD8veiiDNHLMtY5lLPC+6s85l1dCSzbL7Y4dtCK6yjzcwAQptCy6brb:6CoYveiiDNg8
Score

10^/10

cryptbot discovery spyware stealer
- CryptBot
  CryptBot is a C++ stealer distributed widely in bundle with other software.
  spyware stealer cryptbot
- Detects CryptBot payload
  CryptBot is a C++ stealer distributed widely in bundle with other software.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cryptbotdiscoveryspywarestealer

behavioral2

cryptbotdiscoveryspywarestealer