General

  • Target

    f54b04dcddb77fdc57b307e8ec7daea1.bin

  • Size

    2.7MB

  • Sample

    250101-cdh3pszpdy

  • MD5

    42a8bd4bebc7892ac07e905ab0c947d3

  • SHA1

    8998bdc2f49499bab1528b9e1e6ab11b194963bc

  • SHA256

    17e267ef94db241b3ef2b8dfbeae3d85c7b5e0401580778179eefe4638edf369

  • SHA512

    fc6c2b462fe86877b2c49fa6400833919ea8505f6f72ea2426cc0b93e4e04dafb398d26458cd4c62ede3aeed20262aee8708be39daa7be3b947c1c459cb81e9a

  • SSDEEP

    49152:froqAyPC8eLGrZaWviOropIbWbEiVQzP4GWwl7qKfIadNlAVWy3WrTg/ShJ3PFMS:snya8eLGrdVMKWbqAGWIuc9dMV33x/6L

Malware Config

Extracted

Family

cryptbot

Targets

    • Target

      e83c43a49d2ab2c53f73acef9ccf4c2dca23c2c4d149108724b2d7a9dbbd2f14.exe

    • Size

      6.4MB

    • MD5

      f54b04dcddb77fdc57b307e8ec7daea1

    • SHA1

      16a21d6803565b513ade671ec344867bbe5ba97e

    • SHA256

      e83c43a49d2ab2c53f73acef9ccf4c2dca23c2c4d149108724b2d7a9dbbd2f14

    • SHA512

      f3ac35585174247a9f06831fcea12e163d421baec154f993dfb7431eb37ecac755723bc156886e23ff948ae9832241f605f430d9a76e179eb886a95251310ce1

    • SSDEEP

      49152:ASv0XbOiCuFJ6FGyMBjifMcUchTo+ia4S+i9OnlxtdWUhri8g5uKVbYGPyz8E9+y:ASWYuFBymjiScNoPNXiqlPkuKdyz8S

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Cryptbot family

    • Enumerates VirtualBox registry keys

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks