cryptbot | 6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

6f80bb8b47...66.exe

windows7-x64

6f80bb8b47...66.exe

windows10-2004-x64

Sharing

General

Target

6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66.exe
Size

7.4MB
Sample

250101-c6vbfatpgp
MD5

3d060ec62ad0864cfd0d40f46a4f07a9
SHA1

8caba4598d19477a1e4442c4c710fa3909023c5b
SHA256

6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66
SHA512

40e7f3407eec75b9ea5027387e2e5de294e6131f6ef00cda7640a6fb93a7e514683895066e509df817fd4de85854969fba8d01dedb40826e4bb59e28981f127d
SSDEEP

49152:zINwrsavev5BI2tev8aclalc6UnNaxT1jvwgJr0vJnWShbKsqBIKTlblgPyz8wA/:zIQsX5BMvh64cxnMxRjVJQxPKTSyz8/

Score

10^/10

cryptbot discovery evasion spyware stealer

Static task

static1

spyware stealer cryptbot

2 signatures

Behavioral task

behavioral1

Sample

6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66.exe

Resource

win7-20241010-en

cryptbot discovery evasion spyware stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66.exe

Resource

win10v2004-20241007-en

cryptbot discovery evasion spyware stealer

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Extracted

Family

cryptbot

C2

http://home.eleventj11vt.top/olNuzJxAApOsKhOXzdRo1

Targets

- Target
  
  6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66.exe
- Size
  
  7.4MB
- MD5
  
  3d060ec62ad0864cfd0d40f46a4f07a9
- SHA1
  
  8caba4598d19477a1e4442c4c710fa3909023c5b
- SHA256
  
  6f80bb8b470640ae7542eb1b239f2a790d61047254accccf747c4d64907fec66
- SHA512
  
  40e7f3407eec75b9ea5027387e2e5de294e6131f6ef00cda7640a6fb93a7e514683895066e509df817fd4de85854969fba8d01dedb40826e4bb59e28981f127d
- SSDEEP
  
  49152:zINwrsavev5BI2tev8aclalc6UnNaxT1jvwgJr0vJnWShbKsqBIKTlblgPyz8wA/:zIQsX5BMvh64cxnMxRjVJQxPKTSyz8/
Score

10^/10

cryptbot discovery evasion spyware stealer
- CryptBot
  CryptBot is a C++ stealer distributed widely in bundle with other software.
  spyware stealer cryptbot
- Cryptbot family
  cryptbot
- Enumerates VirtualBox registry keys
  evasion
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

spywarestealercryptbot

behavioral1

cryptbotdiscoveryevasionspywarestealer

behavioral2

cryptbotdiscoveryevasionspywarestealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.