Analysis
-
max time kernel
159s -
max time network
176s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
23-10-2024 15:03
General
-
Target
cryptbot_v2/packed/332002810f86c584bc8a49ec5b6efcd047b1988ca1792066cb0fe6d402590968.exe
-
Size
7.0MB
-
MD5
539fb0452bbf1f77accc53b91a436105
-
SHA1
d12fa712e4d0378c85ddce3d73836da385897931
-
SHA256
332002810f86c584bc8a49ec5b6efcd047b1988ca1792066cb0fe6d402590968
-
SHA512
2cc6d4c0f24f69a04e1475a1629426aeb85eeb0c68292b5c501df708429f1dd3504be259981fb10de009a38152c442599659cd997b11f0be34a1368a8bc7e958
-
SSDEEP
49152:D/WmrJmKCZTsl2B6+WW2N3OXFNC+hEN+UlDvd2MUKiKC:DLQkleXlmE0d2I
Score
10/10
Malware Config
Signatures
-
CryptBot
CryptBot is a C++ stealer distributed widely in bundle with other software.
-
Detects CryptBot payload 1 IoCs
CryptBot is a C++ stealer distributed widely in bundle with other software.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\cryptbot_v2\packed\332002810f86c584bc8a49ec5b6efcd047b1988ca1792066cb0fe6d402590968.exe"C:\Users\Admin\AppData\Local\Temp\cryptbot_v2\packed\332002810f86c584bc8a49ec5b6efcd047b1988ca1792066cb0fe6d402590968.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.7MB
-
Filesize
7.0MB