General

  • Target

    176db829a649ccae42e4ae1cabba2100.bin

  • Size

    2.7MB

  • Sample

    241222-bgnlxsxjcz

  • MD5

    c0e41309cd25a9f8b46ce14a9db1a074

  • SHA1

    8c3d2eeb418d3872881fa534d1def6cb121153c4

  • SHA256

    83aa7b69b0ef77bc4dfda2e77f2e1fd9706f13084f38a9b0b54cbb79b542ad2c

  • SHA512

    7c7ef342565ee63aaa2b3bd7fb548459b3a9427562dd5e9c34769f7d8d226e41e75e62ac70cff20cef25a0586bf81a83023452662d66e80e0cb544ecd1af4105

  • SSDEEP

    49152:KoJNo9HuOV7nLDVgQnOTN6TW/wF4Ipg34dFGJwx4Lw+pDKvzf:HG9HvmQnOaWs4IpM4dF/9+pDKb

Malware Config

Extracted

Family

cryptbot

Targets

    • Target

      604599b030e995e4e1d07bbe05659bb9833fd61c1a255061d3e5608b6f9daa61.exe

    • Size

      7.7MB

    • MD5

      176db829a649ccae42e4ae1cabba2100

    • SHA1

      678f4d81c3679e41ad39632229b9153c8e58ff51

    • SHA256

      604599b030e995e4e1d07bbe05659bb9833fd61c1a255061d3e5608b6f9daa61

    • SHA512

      57f3bf88aa57d025aa8be15598488592643d09e7e218e68f81a8b150a768b4338237896a07e31c503a7ea884f8fecf220ff425c5bbb2cb5af275f9d5601c141b

    • SSDEEP

      49152:fNr27PW/BrOShkcQFL6etJdf8zKJoPxHwvS4gsIwMC4GgJWFhC6jL2ZKWbM5Pyz0:fNyTMOS8FGMJ98OW5H8SkyhvK5yz

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Cryptbot family

    • Enumerates VirtualBox registry keys

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks