Extracted

• • Target
    6ac8ca0e934999c3a21da91e8f7b096b4f625e907d7d3953ec77b13060990e8f
  • Size 6.3MB
  • SHA256 6ac8ca0e934999c3a21da91e8f7b096b4f625e907d7d3953ec77b13060990e8f
  • MD5 ae7f383b54a6681117d1a3471cc8c5fb
  • SHA1 1a86b2ec5b98c33e276458f6e5a4b307c5cf2f78
  • SHA512 11f1c3511beb8eba70568ea375ede3596a390eef9aa7d84e142608ef9092eb563a281b367ebe0ba6f5216e9d0941355c1bfff95cd6ed801fd99e0a8659a6efd4
  • SSDEEP 196608:cpiJnOJqqLTpofICnP5Q7mRD0S+Nd3U9p2Dqe5LWrxLserRM41gRHhegEKXOzgEi:vJOgqvpofI6P5Q7mRD0S+Nd3U9p2Dqez
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  cryptbotcredential_accessdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2