General

  • Target

    d8689dcc36f611d77d6f6d1eb1ed8b872104a38568740936209114835a441048

  • Size

    7.2MB

  • Sample

    241025-ck2tdsserr

  • MD5

    3195fa517818ae805403fc975213e9b4

  • SHA1

    43f5dbcd65c3e8fcbf106f4acd95ee26acd5c5ac

  • SHA256

    d8689dcc36f611d77d6f6d1eb1ed8b872104a38568740936209114835a441048

  • SHA512

    8c6036e280f7d201563ad0d7cf6050d581641741ce2a9a1380ceddae6791ea8ec73b49e6f3ba2ecca912dc8bdace75d43874d3e59699d22a46108c727650f17d

  • SSDEEP

    49152:GIZVzeU16eXDTtJu4sCyPwxXZFctiLFMf58GaRyAuk15pWG2ifvEcsUVlueXH3HP:GeVzeU16eXDvxsCjXbnL2fmu

Malware Config

Targets

    • Target

      d8689dcc36f611d77d6f6d1eb1ed8b872104a38568740936209114835a441048

    • Size

      7.2MB

    • MD5

      3195fa517818ae805403fc975213e9b4

    • SHA1

      43f5dbcd65c3e8fcbf106f4acd95ee26acd5c5ac

    • SHA256

      d8689dcc36f611d77d6f6d1eb1ed8b872104a38568740936209114835a441048

    • SHA512

      8c6036e280f7d201563ad0d7cf6050d581641741ce2a9a1380ceddae6791ea8ec73b49e6f3ba2ecca912dc8bdace75d43874d3e59699d22a46108c727650f17d

    • SSDEEP

      49152:GIZVzeU16eXDTtJu4sCyPwxXZFctiLFMf58GaRyAuk15pWG2ifvEcsUVlueXH3HP:GeVzeU16eXDvxsCjXbnL2fmu

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Detects CryptBot payload

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks