Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d

  • Size

    7.9MB

  • Sample

    250311-hvjnfswyex

  • MD5

    5d7598247eadc8d8a48633b6da5adab1

  • SHA1

    a5e652cc1f51624477993288cb0f944aa5bd4c62

  • SHA256

    fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d

  • SHA512

    6675243e3f9b9d3ee4b6ce60c9e67c7f618fe4e9981f9c61e84a667336aac128166cabdfbe0267cda33e506c06c24933b02c395047cb9fa3628eef3c560b19fc

  • SSDEEP

    98304:ClAn48l7eOYFc0q3BGBZ4JSI+KEdyz8F0:TTlKt2iI+ZdG8F0

Malware Config

Extracted

Family

cryptbot

C2

http://home.onebs1sr.top/HqWmoxkcYDsXGZddlHWh174

Targets

    • Target

      fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d

    • Size

      7.9MB

    • MD5

      5d7598247eadc8d8a48633b6da5adab1

    • SHA1

      a5e652cc1f51624477993288cb0f944aa5bd4c62

    • SHA256

      fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d

    • SHA512

      6675243e3f9b9d3ee4b6ce60c9e67c7f618fe4e9981f9c61e84a667336aac128166cabdfbe0267cda33e506c06c24933b02c395047cb9fa3628eef3c560b19fc

    • SSDEEP

      98304:ClAn48l7eOYFc0q3BGBZ4JSI+KEdyz8F0:TTlKt2iI+ZdG8F0

    • CryptBot

      CryptBot is a C++ stealer distributed widely in bundle with other software.

    • Cryptbot family

    • Enumerates VirtualBox registry keys

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks