Extracted

• • Target

    ca07dd5bfa53eea811b2e4608792be0c

  • Size

    667KB

  • MD5

    ca07dd5bfa53eea811b2e4608792be0c

  • SHA1

    49a7a0a73f7b5af40af30c8107833035567e2a76

  • SHA256

    9c409df92867a210bba9c3de29296c54222a9342e7e992392f75456e4a86e7a5

  • SHA512

    096d2974c3263c38463e9f7cbc1158afa13f41ed26ae00f8f155470dddd03b485e30f2839621e74fe146778adf8cbb0f3d3e41beeb6e1cd9dffba8135ed0f290

  • SSDEEP

    12288:o1sHawM5GW8l91jP6xQMf4hbcpWfGE1VKuK6xtKXEbkRXgN3f0zkqlTxK3V1ec:oOawMkW8lHjy6Mf45cpMKu/aXEbkpY0+

  Score

  10^/10

  cryptbotspywarestealerdiscovery

  • CryptBot

    A C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2