Extracted

• • Target

    Set-up.exe

  • Size

    6.3MB

  • MD5

    386c20ca6b91defa8a8070cafbca8d21

  • SHA1

    5b6561a14e6bc3f90a1a0212853380a6638b0d78

  • SHA256

    d02eb2e1eaa35f4065a7bf04da377e2f639c9e1231b1adb2941162462869a0b2

  • SHA512

    db11ca6890e949d3151c650153e41f0886387ed9899769d9c1f3bf430481f18f24840fedd0a3961539ca9783d47ab574684fa411a07b8d30b90c0f4337f2aa7d

  • SSDEEP

    49152:6MRrOYspxtsNTrTyaMDJN8Ri0V32ru1TlE0SJBCmsP1Enhpf+Z24X7LZ6sK1FPXy:09seM7V32rpJa1Enhpf+ZxXnBC1c3D

  Score

  10^/10

  cryptbotcredential_accessdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2