Overview

overview

10

Static

static

3

Main-Installer.exe

windows7-x64

10

Main-Installer.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_46f4b1ec288a17527f403e01e718ddd3cf4a489b8f98e2683a23dbd468237137

  • Size

    1.7MB

  • Sample

    241225-rl2bksvnel

  • MD5

    b557752c713a2186e5cbbfa3222cd8ca

  • SHA1

    8c2a11dc66780d625eaa5345c56e512a27da2fc5

  • SHA256

    46f4b1ec288a17527f403e01e718ddd3cf4a489b8f98e2683a23dbd468237137

  • SHA512

    d9992a21414919e6433a619e764e27775c8462da4ff387d3c9758daf1f91947d2c9ba552fa1065e0b04248c169a0a0c5935c679a572a9f4efaec60a127ab249b

  • SSDEEP

    24576:B4a9+kYWPsXwjE83mZ10M7S03F0iTctqSqOhy/UrlwcAyzpEcDT03rmwh6N:Rgk/kXwjwePiwNqv0VrFDQ7mZN

Score
10/10
cryptbotdiscoveryspywarestealer

Malware Config

Targets

    • Target

      Main-Installer.exe

    • Size

      2.1MB

    • MD5

      54ce61c4a0a44b61eb0cdfd8f2a2d9de

    • SHA1

      b7768927797cc3bda4d5b049aeba68f2b3712d3c

    • SHA256

      c65c74893e884b5f4109608289b4b38200d7f8eff0f04e2dc244a1bbcdb3f233

    • SHA512

      50e5da3227a05c410fec148099289574196b1039007f0da687762e0fc746cb597ceaf7101df03de9b34dce92018cc440a2f19cbf56c73a469337ce65adcbdc80

    • SSDEEP

      49152:Z7UA42umT5om24Ljd0bQaPa0nv63j210D2JBHPCeI:ZoT2umlon8d0bQc9/1tBHaeI

    Score
    10/10
    cryptbotdiscoveryspywarestealer

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

      spywarestealercryptbot

    • CryptBot payload

    • Cryptbot family

      cryptbot

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks