Extracted

• • Target

    165e9bd344f213ca538d13303d0b143f1f36a453743902dfa767f02056f64440

  • Size

    6.3MB

  • MD5

    5ca54caf45f221b29aceac2424e23721

  • SHA1

    b4b8d1f29f08470aadc418c212c9e45b3b345d30

  • SHA256

    165e9bd344f213ca538d13303d0b143f1f36a453743902dfa767f02056f64440

  • SHA512

    d0e53c17022cb3a732a02624d308ff48d50fa0ee3943637434cbd85cabef8c8672ae757a9d61c53531b900ec86fa35ced7b16b386b1bb7a273c8d7cf4af5cd39

  • SSDEEP

    49152:oDViTlpe8BunDpo00UTif8fzjJsDdX4B+QjjJ+hg/Kf4ZE5XJfQlZlW/fN1cB073:oDVESbtshw959yqE5XJfuZlYvy3GMD3M

  Score

  10^/10

  cryptbotdiscoveryspywarestealercredential_access

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2