Extracted

• • Target

    75c5e9e8e213b530badb0086e06f74250f813b2dbc14718d0b0492b0eb4706a9

  • Size

    6.3MB

  • MD5

    72ad74a67e4f191faf234c2ff3a02558

  • SHA1

    2030f2193f8659198636ce9ce01419b67d1af8bd

  • SHA256

    75c5e9e8e213b530badb0086e06f74250f813b2dbc14718d0b0492b0eb4706a9

  • SHA512

    66ae5401324dd2fb1fc0c8485a212f095272c8e0586ab0111e3b3db9eb5383df1fea85847a7153b57d11384f7c429506d549cfe5c0ff907d129699325c9b9d5b

  • SSDEEP

    49152:1P8R/KvyA7JN9mqzhRe9thTK5pYe/yS1dXjueIhFpAeqlVxfMi0c1tVmweKE/P8I:N8k97bh+hcpYelX67v+v41uGDDFUe

  Score

  10^/10

  cryptbotcredential_accessdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2