Extracted

• • Target

    9b985f2af040a18f231b1c4851365e8f10a5ef394f455306fdc8f395b374f01e

  • Size

    6.3MB

  • MD5

    117cd56896073eaa680d408fe7fb51c8

  • SHA1

    a9db5e8f4e79d5e099a1e2a6d894d6d6d9283d03

  • SHA256

    9b985f2af040a18f231b1c4851365e8f10a5ef394f455306fdc8f395b374f01e

  • SHA512

    c9854c250b669078f5095ed6093568db33f2b93e0eaa96e8e7bf97dee4e48374943b68cbfb7dd513c520b4ebf980b390eb7fc372bb59f69bc08f19ed7614f8a4

  • SSDEEP

    49152:KfuaMm44Xnz/IYkmjVcIhGWczrYfRX9Iu14k85M7xgc6jbb36ST9llys58JLNQuC:WzRkmELkpX9RFXEb36Y9l9201LcDS

  Score

  10^/10

  cryptbotcredential_accessdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2