General

  • Target

    604599b030e995e4e1d07bbe05659bb9833fd61c1a255061d3e5608b6f9daa61.exe

  • Size

    7.7MB

  • Sample

    241221-c4gybs1kfp

  • MD5

    176db829a649ccae42e4ae1cabba2100

  • SHA1

    678f4d81c3679e41ad39632229b9153c8e58ff51

  • SHA256

    604599b030e995e4e1d07bbe05659bb9833fd61c1a255061d3e5608b6f9daa61

  • SHA512

    57f3bf88aa57d025aa8be15598488592643d09e7e218e68f81a8b150a768b4338237896a07e31c503a7ea884f8fecf220ff425c5bbb2cb5af275f9d5601c141b

  • SSDEEP

    49152:fNr27PW/BrOShkcQFL6etJdf8zKJoPxHwvS4gsIwMC4GgJWFhC6jL2ZKWbM5Pyz0:fNyTMOS8FGMJ98OW5H8SkyhvK5yz

Malware Config

Extracted

Family

cryptbot

Targets

    • Target

      604599b030e995e4e1d07bbe05659bb9833fd61c1a255061d3e5608b6f9daa61.exe

    • Size

      7.7MB

    • MD5

      176db829a649ccae42e4ae1cabba2100

    • SHA1

      678f4d81c3679e41ad39632229b9153c8e58ff51

    • SHA256

      604599b030e995e4e1d07bbe05659bb9833fd61c1a255061d3e5608b6f9daa61

    • SHA512

      57f3bf88aa57d025aa8be15598488592643d09e7e218e68f81a8b150a768b4338237896a07e31c503a7ea884f8fecf220ff425c5bbb2cb5af275f9d5601c141b

    • SSDEEP

      49152:fNr27PW/BrOShkcQFL6etJdf8zKJoPxHwvS4gsIwMC4GgJWFhC6jL2ZKWbM5Pyz0:fNyTMOS8FGMJ98OW5H8SkyhvK5yz

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Cryptbot family

    • Enumerates VirtualBox registry keys

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks