Overview

overview

10

Static

static

10

Set-up.exe

windows7-x64

10

Set-up.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Set-up.exe

  • Size

    6.4MB

  • Sample

    241230-vp9c5szrfn

  • MD5

    f54b04dcddb77fdc57b307e8ec7daea1

  • SHA1

    16a21d6803565b513ade671ec344867bbe5ba97e

  • SHA256

    e83c43a49d2ab2c53f73acef9ccf4c2dca23c2c4d149108724b2d7a9dbbd2f14

  • SHA512

    f3ac35585174247a9f06831fcea12e163d421baec154f993dfb7431eb37ecac755723bc156886e23ff948ae9832241f605f430d9a76e179eb886a95251310ce1

  • SSDEEP

    49152:ASv0XbOiCuFJ6FGyMBjifMcUchTo+ia4S+i9OnlxtdWUhri8g5uKVbYGPyz8E9+y:ASWYuFBymjiScNoPNXiqlPkuKdyz8S

Score
10/10
cryptbotdiscoveryevasionspywarestealer

Malware Config

Extracted

Family

cryptbot

Targets

    • Target

      Set-up.exe

    • Size

      6.4MB

    • MD5

      f54b04dcddb77fdc57b307e8ec7daea1

    • SHA1

      16a21d6803565b513ade671ec344867bbe5ba97e

    • SHA256

      e83c43a49d2ab2c53f73acef9ccf4c2dca23c2c4d149108724b2d7a9dbbd2f14

    • SHA512

      f3ac35585174247a9f06831fcea12e163d421baec154f993dfb7431eb37ecac755723bc156886e23ff948ae9832241f605f430d9a76e179eb886a95251310ce1

    • SSDEEP

      49152:ASv0XbOiCuFJ6FGyMBjifMcUchTo+ia4S+i9OnlxtdWUhri8g5uKVbYGPyz8E9+y:ASWYuFBymjiScNoPNXiqlPkuKdyz8S

    Score
    10/10
    cryptbotdiscoveryevasionspywarestealer

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

      spywarestealercryptbot

    • Cryptbot family

      cryptbot

    • Enumerates VirtualBox registry keys

      evasion

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks