Overview

overview

10

Static

static

3

e4dd53f42d...06.exe

windows7-x64

10

e4dd53f42d...06.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4dd53f42d79f62b17d146ecbb9b33b20495015d4709e0711a5d2cac87538206

  • Size

    7.1MB

  • Sample

    241021-rbdgrswfna

  • MD5

    da8ceaf7d663bfcfdfadba750259dd35

  • SHA1

    ed7ec222d1eeb1cfec264cdad2ea0245b1559a85

  • SHA256

    e4dd53f42d79f62b17d146ecbb9b33b20495015d4709e0711a5d2cac87538206

  • SHA512

    04d9faaf65065f485bd120e13edbe6d41380ff5746b9201d77c5b02a432ef448527aed3156be924620afc1319d1a1f9c4dfe6835b31319b04558cf998e872d65

  • SSDEEP

    49152:2eBBoUBmetG+OF/J/5Z5EBn89EbAqx8sbMVrPsh:2OpmIa/p5Z5snifFRP

Score
10/10
cryptbotdiscoveryspywarestealer

Malware Config

Targets

    • Target

      e4dd53f42d79f62b17d146ecbb9b33b20495015d4709e0711a5d2cac87538206

    • Size

      7.1MB

    • MD5

      da8ceaf7d663bfcfdfadba750259dd35

    • SHA1

      ed7ec222d1eeb1cfec264cdad2ea0245b1559a85

    • SHA256

      e4dd53f42d79f62b17d146ecbb9b33b20495015d4709e0711a5d2cac87538206

    • SHA512

      04d9faaf65065f485bd120e13edbe6d41380ff5746b9201d77c5b02a432ef448527aed3156be924620afc1319d1a1f9c4dfe6835b31319b04558cf998e872d65

    • SSDEEP

      49152:2eBBoUBmetG+OF/J/5Z5EBn89EbAqx8sbMVrPsh:2OpmIa/p5Z5snifFRP

    Score
    10/10
    cryptbotdiscoveryspywarestealer

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

      spywarestealercryptbot

    • Detects CryptBot payload

      CryptBot is a C++ stealer distributed widely in bundle with other software.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks