Rewterz Threat Alert – CryptBot Trojan – Active IOCs

Severity

High

Analysis Summary

Cryptbot is delivered as a Trojan malware. The Cryptbot Trojan Malware hides within legitimate software in order to be installed by its victims. Some malicious websites and many of them appear on the top pages such as cracks and serials of popular commercial software are entered in search engines, many victims have downloaded this malware and execute on their systems.

Impact

Credential Theft
Information Theft
Expose of Sensitive Data

Indicators of Compromise

MD5

cf291da490b721fbd70d266de30edac8
a40bf24f9abab48307f5fc77c1ac24a5
d96cb8c52bf09a218018c3bb6259eb21

SHA-256

a6b22caff1133b84c4d5595ebdade9aa4d1d0a8058903af7f6c55f6423904997
08dc80decc07ab52c63bf3722ae05c765a57c1d1a7420c06bde6d9a7ec22231f
5e93d38360e7fde9964baa7ecdc09bd3e49041e3ca948bf952b0e2f75ab26dfb

SHA-1

c99b8330057685380c95e2a5901253fc39bafe49
ba057e422388c0c3b98ea2087c2be1598490ecc8
c996c3184efed77b3d3ea91f3a865f979db9a586

Remediation

Block all threat indicators at your respective controls
Search for IOCs in your environment.

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo