Overview

overview

10

Static

static

3

Set-up.exe

windows7-x64

3

Set-up.exe

windows10-2004-x64

10

Set-up.exe

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Set-up.exe

  • Size

    7.3MB

  • Sample

    241117-m188hsxpdv

  • MD5

    c0e308e838686c9c99aeb4e91b99b4a0

  • SHA1

    11964df9697c503b908d443c73b798e07965251e

  • SHA256

    9be2db7431723fcb4f08c640cf942d2304d1c9fcc6d48729a69c9cedf44911f2

  • SHA512

    8a0cf5ccb5c6ff798d74a0aaa55a1cdd2fbbec109d96f7869af0b1dc300b2207002102fb822e0e2efc1cb8fc7e13354dc4979bd26b7e6d13bd3ab3089330668b

  • SSDEEP

    196608:dKGrH49CIPfnEVj9Z5XRAnZAmwr+cR5aXJmHaBJwmQFWmAd8vdJJhl6D/H:dKQYMIPfnEVj9Z5XRAnZAmwr+cR5aXJj

Score
10/10
cryptbotcredential_accessdiscoveryspywarestealer

Malware Config

Targets

    • Target

      Set-up.exe

    • Size

      7.3MB

    • MD5

      c0e308e838686c9c99aeb4e91b99b4a0

    • SHA1

      11964df9697c503b908d443c73b798e07965251e

    • SHA256

      9be2db7431723fcb4f08c640cf942d2304d1c9fcc6d48729a69c9cedf44911f2

    • SHA512

      8a0cf5ccb5c6ff798d74a0aaa55a1cdd2fbbec109d96f7869af0b1dc300b2207002102fb822e0e2efc1cb8fc7e13354dc4979bd26b7e6d13bd3ab3089330668b

    • SSDEEP

      196608:dKGrH49CIPfnEVj9Z5XRAnZAmwr+cR5aXJmHaBJwmQFWmAd8vdJJhl6D/H:dKQYMIPfnEVj9Z5XRAnZAmwr+cR5aXJj

    Score
    10/10
    discoverycryptbotcredential_accessspywarestealer

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

      spywarestealercryptbot

    • Cryptbot family

      cryptbot

    • Detects CryptBot payload

      CryptBot is a C++ stealer distributed widely in bundle with other software.

      spywarestealer

    • Uses browser remote debugging

      Can be used control the browser and steal sensitive information such as credentials and session cookies.

      credential_accessstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks