✕
Request a Demo
Rewterz
Rewterz Threat Alert – RedLine Malware – Active IOCs
September 19, 2021
Rewterz
Rewterz Threat Alert – SNAKE Ransomware – Active IOCs
September 20, 2021

Rewterz Threat Alert – CryptBot Trojan – Active IOCs

Severity

High

Analysis Summary

Cryptbot is delivered as a Trojan malware. The Cryptbot Trojan Malware hides within legitimate software in order to be installed by its victims. Some malicious websites and many of them appear on the top pages such as cracks and serials of popular commercial software are entered in search engines, many victims have downloaded this malware and execute on their systems.

Impact

  • Credential Theft
  • Information Theft
  • Expose of Sensitive Data

Indicators of Compromise

MD5

  • cf291da490b721fbd70d266de30edac8
  • a40bf24f9abab48307f5fc77c1ac24a5
  • d96cb8c52bf09a218018c3bb6259eb21

SHA-256

  • a6b22caff1133b84c4d5595ebdade9aa4d1d0a8058903af7f6c55f6423904997
  • 08dc80decc07ab52c63bf3722ae05c765a57c1d1a7420c06bde6d9a7ec22231f
  • 5e93d38360e7fde9964baa7ecdc09bd3e49041e3ca948bf952b0e2f75ab26dfb

SHA-1

  • c99b8330057685380c95e2a5901253fc39bafe49
  • ba057e422388c0c3b98ea2087c2be1598490ecc8
  • c996c3184efed77b3d3ea91f3a865f979db9a586

Remediation

  • Block all threat indicators at your respective controls
  • Search for IOCs in your environment.