Extracted

• • Target

    5aec1cb903ac8b2b877603083a838004cd139caf58f4212e8d7c371f19e17b7c

  • Size

    6.3MB

  • MD5

    b363204a976af56e24237d8e3e7ba698

  • SHA1

    7b169f65621145ca4e70d9ce7ea490af3628f879

  • SHA256

    5aec1cb903ac8b2b877603083a838004cd139caf58f4212e8d7c371f19e17b7c

  • SHA512

    6e56420b654d243c35d924472e74a1b5e770fdc8ffd911dd64979a95f7028651f606ed9a1db1efc5bdf1ee2520cb696e3413b8a54c6c2a7dc06ef113b6d2b10b

  • SSDEEP

    98304:xiwCQqcjj1TcJApKotVVo7LgF7ThWRRDgPTQhFrrIhv6KgY02:J/1THe3scD0QhWdgY02

  Score

  10^/10

  cryptbotcredential_accessdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2