Overview

overview

10

Static

static

10

Set-up.exe

windows10-2004-x64

10

Set-up.exe

windows10-ltsc 2021-x64

10

Set-up.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Set-up.exe

  • Size

    7.0MB

  • Sample

    250107-qnxwhasqax

  • MD5

    b370d3ac6f45065eb857c274c6b7331e

  • SHA1

    261e0988a4c25dc570bdf6e90e47c7cf1bb3e1c7

  • SHA256

    561996222667a63830c7f70e1565676e71b1f1ad2d8add95ce2bb72b13c5c7e5

  • SHA512

    86dcbd0dc886d6835bf8fef0ec055cce2c75db17b3bd6f1dce8a293ae10fcd1a143f98f3113b547fa99492f323852dbdc3bb5e2ed83d2d642a606939cd57c3ad

  • SSDEEP

    49152:YmfR9qQzHM+xy2pqQPHRNqjBKvYEqX3/cAxzSAN3SUuM2g6A1WYhJASqYHKYbYVl:Ymf+j+xBPPxNUfc2zxV5uGXJK3yz8D/

Score
10/10
cryptbotdiscoveryevasionspywarestealer

Malware Config

Extracted

Family

cryptbot

Targets

    • Target

      Set-up.exe

    • Size

      7.0MB

    • MD5

      b370d3ac6f45065eb857c274c6b7331e

    • SHA1

      261e0988a4c25dc570bdf6e90e47c7cf1bb3e1c7

    • SHA256

      561996222667a63830c7f70e1565676e71b1f1ad2d8add95ce2bb72b13c5c7e5

    • SHA512

      86dcbd0dc886d6835bf8fef0ec055cce2c75db17b3bd6f1dce8a293ae10fcd1a143f98f3113b547fa99492f323852dbdc3bb5e2ed83d2d642a606939cd57c3ad

    • SSDEEP

      49152:YmfR9qQzHM+xy2pqQPHRNqjBKvYEqX3/cAxzSAN3SUuM2g6A1WYhJASqYHKYbYVl:Ymf+j+xBPPxNUfc2zxV5uGXJK3yz8D/

    Score
    10/10
    cryptbotdiscoveryevasionspywarestealer

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

      spywarestealercryptbot

    • Cryptbot family

      cryptbot

    • Enumerates VirtualBox registry keys

      evasion

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks