Overview

overview

10

Static

static

10

open-need-...97.exe

windows10-2004-x64

10

open-need-...97.exe

windows11-21h2-x64

10

open-need-...97.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    open-need-this-197.exe

  • Size

    8.3MB

  • Sample

    250212-t6f79azkhj

  • MD5

    2761863597a1e22c894a88265eb6fdbb

  • SHA1

    3814875979acf7329d70957a208659528a4c83c6

  • SHA256

    cd5fd68c44426d71df9bbd25c62b425932f9c2e1d5fe020e70ee1b73e3af5292

  • SHA512

    2fccf5a720f70a9091ccd31fb1c1f5a5f7d52cf89d0e7fe79028f18c56285d4465cd674f85266dbdceb1ec561dadbc831a2da37fa9a0c3cf3bf7f677d3ebca4b

  • SSDEEP

    98304:pn8Yxk5fQ4RtDc7lIwd9ISwOnSKXyz8Xa:9S5Y0tK6MnnS8G8Xa

Score
10/10
cryptbotdefense_evasiondiscoveryspywarestealer

Malware Config

Extracted

Family

cryptbot

C2

http://home.thrtjj13sr.top/eqlJMJRyIxwLXPguLiyp16

Targets

    • Target

      open-need-this-197.exe

    • Size

      8.3MB

    • MD5

      2761863597a1e22c894a88265eb6fdbb

    • SHA1

      3814875979acf7329d70957a208659528a4c83c6

    • SHA256

      cd5fd68c44426d71df9bbd25c62b425932f9c2e1d5fe020e70ee1b73e3af5292

    • SHA512

      2fccf5a720f70a9091ccd31fb1c1f5a5f7d52cf89d0e7fe79028f18c56285d4465cd674f85266dbdceb1ec561dadbc831a2da37fa9a0c3cf3bf7f677d3ebca4b

    • SSDEEP

      98304:pn8Yxk5fQ4RtDc7lIwd9ISwOnSKXyz8Xa:9S5Y0tK6MnnS8G8Xa

    Score
    10/10
    cryptbotdefense_evasiondiscoveryspywarestealer

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

      spywarestealercryptbot

    • Cryptbot family

      cryptbot

    • Enumerates VirtualBox registry keys

      defense_evasion

    • Downloads MZ/PE file

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks