Extracted

• • Target
    8cf6f866925650049c693fa5b57236375ae2f47d73b99081b5ed96da32bf41f8
  • Size 6.4MB
  • SHA256 8cf6f866925650049c693fa5b57236375ae2f47d73b99081b5ed96da32bf41f8
  • MD5 4d445f9a6549ae05b9e136f1e7ffa45a
  • SHA1 70b95f68bc199edba2db5e4e161813c47fcf5aa2
  • SHA512 8bf51a516d5f43fba27ee564d836211be74ce73d98869e4fd385825df474e25bf06bd1870f7e87e4ecb74118d464149bee7f83951e103914306aa3e15989747b
  • SSDEEP 98304:DSDpyJp0whofVUV+vwFm6QTocnJY6DXcfxEBVaR2uG:KyJeooscYQdJYMXcfGI8uG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  cryptbotcredential_accessdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2