Overview

overview

10

Static

static

10

Set-up.exe

windows7-x64

10

Set-up.exe

windows10-2004-x64

10

Set-up.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Set-up.exe

  • Size

    7.7MB

  • Sample

    241220-wva8za1rck

  • MD5

    176db829a649ccae42e4ae1cabba2100

  • SHA1

    678f4d81c3679e41ad39632229b9153c8e58ff51

  • SHA256

    604599b030e995e4e1d07bbe05659bb9833fd61c1a255061d3e5608b6f9daa61

  • SHA512

    57f3bf88aa57d025aa8be15598488592643d09e7e218e68f81a8b150a768b4338237896a07e31c503a7ea884f8fecf220ff425c5bbb2cb5af275f9d5601c141b

  • SSDEEP

    49152:fNr27PW/BrOShkcQFL6etJdf8zKJoPxHwvS4gsIwMC4GgJWFhC6jL2ZKWbM5Pyz0:fNyTMOS8FGMJ98OW5H8SkyhvK5yz

Score
10/10
cryptbotdiscoveryevasionspywarestealer

Malware Config

Extracted

Family

cryptbot

Targets

    • Target

      Set-up.exe

    • Size

      7.7MB

    • MD5

      176db829a649ccae42e4ae1cabba2100

    • SHA1

      678f4d81c3679e41ad39632229b9153c8e58ff51

    • SHA256

      604599b030e995e4e1d07bbe05659bb9833fd61c1a255061d3e5608b6f9daa61

    • SHA512

      57f3bf88aa57d025aa8be15598488592643d09e7e218e68f81a8b150a768b4338237896a07e31c503a7ea884f8fecf220ff425c5bbb2cb5af275f9d5601c141b

    • SSDEEP

      49152:fNr27PW/BrOShkcQFL6etJdf8zKJoPxHwvS4gsIwMC4GgJWFhC6jL2ZKWbM5Pyz0:fNyTMOS8FGMJ98OW5H8SkyhvK5yz

    Score
    10/10
    cryptbotdiscoveryevasionspywarestealer

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

      spywarestealercryptbot

    • Cryptbot family

      cryptbot

    • Enumerates VirtualBox registry keys

      evasion

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks