Extracted

• • Target

    39a6e471a9bc622f74a255595d092b9a

  • Size

    662KB

  • MD5

    39a6e471a9bc622f74a255595d092b9a

  • SHA1

    49c16aefbe586e08e46ae8d863bc1b5e544441ed

  • SHA256

    b48c9cc1470787a06df5e3a8eb9d489d77ac022c23ea9538d34d852610804921

  • SHA512

    55abc38ed55f2e003f3addd0c610bdb3cdbc081a2ab0642da939545b9db73f26dc5be0e3d37c8e88f97226273181ce8be367d39f664ff3b89f81935dbfecef30

  • SSDEEP

    12288:NilOKNYkqi1r3iSFPUXo67taaYOIP+4PzazTVvLg5j0+P8ydaVoy7jQVOQFAm:MskYk/ANZVuzgs5j0OPcVoynZm

  Score

  10^/10

  cryptbotdiscoveryspywarestealer

  • CryptBot

    A C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • CryptBot payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2