Extracted

• • Target

    Set-up.exe

  • Size

    6.4MB

  • MD5

    195cc95668dd98a7faef33edd420cbaa

  • SHA1

    fa3742a3133014748a228518e56cabb2aa3d51c7

  • SHA256

    d6b39b282ae8e699be20335b3558064c96d8a93b4b44b5356d0045d348ccac1b

  • SHA512

    9bfcaa091f119e093148bd70220debcd5edab17968d01e704ece972f89a4632e3c33ec865b1e1aa7cb22f4a0acb78fd6e9baebe8d704ea67ff4e14c0cbc7dcba

  • SSDEEP

    98304:u6cJdAtx08Avfq5AwpTf1BOqshBlYG7X+tXa6+:u6cAtoYrf1TsJ7X+k6+

  Score

  10^/10

  cryptbotcredential_accessdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1