Overview

overview

10

Static

static

10

Set-up.exe

windows7-x64

10

Set-up.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Set-up.exe

  • Size

    6.5MB

  • Sample

    250101-yp7q4atnbq

  • MD5

    91d466403f85bd189cb929085f88d772

  • SHA1

    1c8fc1b0646cd236252a3a486d42d020c0fc653d

  • SHA256

    2b8c84164d2b566fc35a9d2ae6243ec985b70231d2685bc9118ed4c11092f94a

  • SHA512

    d50bae9b95af24f3d1a8d39afc8dd97bfc6a4925726edfb1442f0545b96e2b967b1d86aa59f41e2dc1cd864c706d2ba0a242a573e2eb18943f3bcc668e79e494

  • SSDEEP

    49152:s5fbhSVW3gQkZdIG87yYU9W0fBc/f/SEv2QqAy45x4WMhxcKGTKGbfCPyz8790h1:s5fsNQkZa79KlJcX/1vBquXUWKbyz87U

Score
10/10
cryptbotdiscoveryevasionspywarestealer

Malware Config

Extracted

Family

cryptbot

Targets

    • Target

      Set-up.exe

    • Size

      6.5MB

    • MD5

      91d466403f85bd189cb929085f88d772

    • SHA1

      1c8fc1b0646cd236252a3a486d42d020c0fc653d

    • SHA256

      2b8c84164d2b566fc35a9d2ae6243ec985b70231d2685bc9118ed4c11092f94a

    • SHA512

      d50bae9b95af24f3d1a8d39afc8dd97bfc6a4925726edfb1442f0545b96e2b967b1d86aa59f41e2dc1cd864c706d2ba0a242a573e2eb18943f3bcc668e79e494

    • SSDEEP

      49152:s5fbhSVW3gQkZdIG87yYU9W0fBc/f/SEv2QqAy45x4WMhxcKGTKGbfCPyz8790h1:s5fsNQkZa79KlJcX/1vBquXUWKbyz87U

    Score
    10/10
    cryptbotdiscoveryevasionspywarestealer

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

      spywarestealercryptbot

    • Cryptbot family

      cryptbot

    • Enumerates VirtualBox registry keys

      evasion

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks