Analysis
-
max time kernel
142s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
23-10-2024 15:03
General
-
Target
cryptbot_v2/packed/4caa926d2422c584f16a4373daea24880fbd08a7baf3c9214421281965f89ec6.exe
-
Size
6.3MB
-
MD5
5e8fec7f2f2102b5dcd44c061f3197fc
-
SHA1
3d8f67a861dd144b6dba216db88012ee62aed4a6
-
SHA256
4caa926d2422c584f16a4373daea24880fbd08a7baf3c9214421281965f89ec6
-
SHA512
0aafde8e576e305c9d8a61af774235ff32e769270971e66b9cc6cce9ac4dccf1f4434cf1f63b0801beb8a271877d89ccd3b58e6c899d9fae17a6e9c19798ca08
-
SSDEEP
49152:odrAjDR10enDYGCPX544IvBqkqoO65ia6sC9TNpWG2ifvEcsUVlWOeXH3HUkRNdl:ooMenDOPX5JIvP7O65wsCN
Malware Config
Signatures
-
CryptBot
CryptBot is a C++ stealer distributed widely in bundle with other software.
-
Detects CryptBot payload 1 IoCs
CryptBot is a C++ stealer distributed widely in bundle with other software.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\cryptbot_v2\packed\4caa926d2422c584f16a4373daea24880fbd08a7baf3c9214421281965f89ec6.exe"C:\Users\Admin\AppData\Local\Temp\cryptbot_v2\packed\4caa926d2422c584f16a4373daea24880fbd08a7baf3c9214421281965f89ec6.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.7MB
-
Filesize
6.3MB