Extracted

• • Target

    042edfa930d712dd70b6adee1218d3d9

  • Size

    688KB

  • MD5

    042edfa930d712dd70b6adee1218d3d9

  • SHA1

    77edda424477c5737ce30f2b2440921a2525a214

  • SHA256

    2b077c09e3e5b9035d53cf73f0afc4455463dcb2289816f15f50f68f6b5f5df7

  • SHA512

    43887773ace8921bff1371df9947733b1297f0ea6aed3c669220b35175e6d56031ac6033c8cbf639e267ae20fce93c01608b4917155060a60e5effc20adbdd20

  • SSDEEP

    12288:dnIjvmmWAk6xHgupN9e5pOELFfan1wpbbCdkpzoOlLXwKaBt+8pvRUZem3c:SvDW4zA3VJKKfzrlLkBzpJ4X

  Score

  10^/10

  cryptbotdiscoveryspywarestealer

  • CryptBot

    A C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • CryptBot payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2