Extracted

• • Target

    c316a19809d7a6407c7fcec296445375_JaffaCakes118

  • Size

    386KB

  • MD5

    c316a19809d7a6407c7fcec296445375

  • SHA1

    93babfad2f6bd39214c0eeecc18bc0ac9e0e9d70

  • SHA256

    1341aa92c98b555b4ff1e1326b8dab052b4396526c659cbc43007b880643891d

  • SHA512

    bacccdcf8cfb1891d948259cbae5b83477ce4e3602a50e7c1e1c29c713ab55b6705e0901146e61fec59c42b8d618ab33c338100f4fb190116f9d10e78a948028

  • SSDEEP

    6144:XNj6TYWryIIt5z5nYiXu1t7+y/urZkw5FwthSHP+WeoOM6WdNU:XNj6TvOnq1t+ymlkw5FwIP+WeoOSN

  Score

  10^/10

  cryptbotspywarestealerdiscovery

  • CryptBot

    A C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2