General

  • Target

    Set-up-1.exe

  • Size

    12.2MB

  • MD5

    b7f95a6fba7ee898425a69ffd2b6c204

  • SHA1

    d995e2ed97947778c489f6384ba3af0f4343c0bc

  • SHA256

    8b6a0a8d8594fb4f465a8220533a8cbf25fb725220dfc35056c7787b27d89643

  • SHA512

    3b9d35e20161767dabea7bda5ed7db3f63ce738e0934965695dedf1f7487fc092c0e2fe3cf35b9656f521c2ab9e30596cda49d38c7ace360ff2b2b0e52930b59

  • SSDEEP

    196608:1MRd/45eJp2M0lVasW4PEaYjxR3eYr4+hn:tf7CxwAn

Malware Config

Signatures

  • Cryptbot family
  • Detects CryptBot payload 1 IoCs

    CryptBot is a C++ stealer distributed widely in bundle with other software.

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Set-up-1.exe
    .exe windows:4 windows x86 arch:x86

    50bc89909d52e5bde65d83f33166faf1


    Headers

    Imports

    Exports

    Sections