cryptbot | fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d | Triage

Submit
Reports

Overview

overview

Static

static

fcc88b2fe0...8d.exe

windows7-x64

fcc88b2fe0...8d.exe

windows10-2004-x64

Sharing

General

Target

fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d
Size

7.9MB
Sample

250311-hvjnfswyex
MD5

5d7598247eadc8d8a48633b6da5adab1
SHA1

a5e652cc1f51624477993288cb0f944aa5bd4c62
SHA256

fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d
SHA512

6675243e3f9b9d3ee4b6ce60c9e67c7f618fe4e9981f9c61e84a667336aac128166cabdfbe0267cda33e506c06c24933b02c395047cb9fa3628eef3c560b19fc
SSDEEP

98304:ClAn48l7eOYFc0q3BGBZ4JSI+KEdyz8F0:TTlKt2iI+ZdG8F0

Score

10^/10

cryptbot defense_evasion discovery spyware stealer

Static task

static1

spyware stealer cryptbot

2 signatures

Behavioral task

behavioral1

Sample

fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d.exe

Resource

win7-20240903-en

cryptbot defense_evasion discovery spyware stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d.exe

Resource

win10v2004-20250217-en

cryptbot defense_evasion discovery spyware stealer

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Extracted

Family

cryptbot

C2

http://home.onebs1sr.top/HqWmoxkcYDsXGZddlHWh174

Targets

- Target
  
  fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d
- Size
  
  7.9MB
- MD5
  
  5d7598247eadc8d8a48633b6da5adab1
- SHA1
  
  a5e652cc1f51624477993288cb0f944aa5bd4c62
- SHA256
  
  fcc88b2fe00066a8d27bbde413677f0c65127e73eeb59f1c69ecc9fb8fbdb28d
- SHA512
  
  6675243e3f9b9d3ee4b6ce60c9e67c7f618fe4e9981f9c61e84a667336aac128166cabdfbe0267cda33e506c06c24933b02c395047cb9fa3628eef3c560b19fc
- SSDEEP
  
  98304:ClAn48l7eOYFc0q3BGBZ4JSI+KEdyz8F0:TTlKt2iI+ZdG8F0
Score

10^/10

cryptbot defense_evasion discovery spyware stealer
- CryptBot
  CryptBot is a C++ stealer distributed widely in bundle with other software.
  spyware stealer cryptbot
- Cryptbot family
  cryptbot
- Enumerates VirtualBox registry keys
  defense_evasion
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

spywarestealercryptbot

behavioral1

cryptbotdefense_evasiondiscoveryspywarestealer

behavioral2

cryptbotdefense_evasiondiscoveryspywarestealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.