Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66.exe

  • Size

    7.4MB

  • Sample

    250101-c6vbfatpgp

  • MD5

    3d060ec62ad0864cfd0d40f46a4f07a9

  • SHA1

    8caba4598d19477a1e4442c4c710fa3909023c5b

  • SHA256

    6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66

  • SHA512

    40e7f3407eec75b9ea5027387e2e5de294e6131f6ef00cda7640a6fb93a7e514683895066e509df817fd4de85854969fba8d01dedb40826e4bb59e28981f127d

  • SSDEEP

    49152:zINwrsavev5BI2tev8aclalc6UnNaxT1jvwgJr0vJnWShbKsqBIKTlblgPyz8wA/:zIQsX5BMvh64cxnMxRjVJQxPKTSyz8/

Malware Config

Extracted

Family

cryptbot

C2

http://home.eleventj11vt.top/olNuzJxAApOsKhOXzdRo1

Targets

    • Target

      6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66.exe

    • Size

      7.4MB

    • MD5

      3d060ec62ad0864cfd0d40f46a4f07a9

    • SHA1

      8caba4598d19477a1e4442c4c710fa3909023c5b

    • SHA256

      6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66

    • SHA512

      40e7f3407eec75b9ea5027387e2e5de294e6131f6ef00cda7640a6fb93a7e514683895066e509df817fd4de85854969fba8d01dedb40826e4bb59e28981f127d

    • SSDEEP

      49152:zINwrsavev5BI2tev8aclalc6UnNaxT1jvwgJr0vJnWShbKsqBIKTlblgPyz8wA/:zIQsX5BMvh64cxnMxRjVJQxPKTSyz8/

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Cryptbot family

    • Enumerates VirtualBox registry keys

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.