General

  • Target

    0x0007000000019547-13.dat

  • Size

    7.7MB

  • Sample

    250209-vy1scsxrbw

  • MD5

    c411bef822305589785b18bd83a3cb89

  • SHA1

    890b2bdd6e88a45192d3552879afbed9955e9b8c

  • SHA256

    b60b783764d2c193eec80661e43a512fad2ffc56a56ee1a190b6aac0cad33b8e

  • SHA512

    b2503b11b0ffc28118c45490b6c7c148ea034d3fa82805fe4aa3f986ddd9c473dd1cc323afa19cea39319f75dec5bf6e39bdc97fed4d9f4c7cef48a55363d1a6

  • SSDEEP

    49152:Bm1ddnDl/UOLUhzPvta13s564P0RmwcMsWLMUVIz1pPRif8QWchshbioKxbMhPyJ:Bm9DEzPIsA4ycTWIUuzXv1KMyz8+

Malware Config

Extracted

Family

cryptbot

C2

http://home.twelveff20pn.top/HfqvZFTxgmZzemQbMMGA1736773805

Targets

    • Target

      0x0007000000019547-13.dat

    • Size

      7.7MB

    • MD5

      c411bef822305589785b18bd83a3cb89

    • SHA1

      890b2bdd6e88a45192d3552879afbed9955e9b8c

    • SHA256

      b60b783764d2c193eec80661e43a512fad2ffc56a56ee1a190b6aac0cad33b8e

    • SHA512

      b2503b11b0ffc28118c45490b6c7c148ea034d3fa82805fe4aa3f986ddd9c473dd1cc323afa19cea39319f75dec5bf6e39bdc97fed4d9f4c7cef48a55363d1a6

    • SSDEEP

      49152:Bm1ddnDl/UOLUhzPvta13s564P0RmwcMsWLMUVIz1pPRif8QWchshbioKxbMhPyJ:Bm9DEzPIsA4ycTWIUuzXv1KMyz8+

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Cryptbot family

    • Enumerates VirtualBox registry keys

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks