Extracted

• • Target

    66d97f40b83b98b4567bb98bbd8f4c4d79d44e731bbd607ecc7fd1d80ec41c55

  • Size

    6.3MB

  • MD5

    86049b6becb16ab24d68b42ecdda5384

  • SHA1

    922ec3814d54e9c521aff3163e17e4ecfc80afd3

  • SHA256

    66d97f40b83b98b4567bb98bbd8f4c4d79d44e731bbd607ecc7fd1d80ec41c55

  • SHA512

    11bc6767342750951f8d55015a1d6c5cabaef161990e6d81dfcdebce1b9b1097e0489fa764f4be944d7f47ec5f65ecad6a9dad4c8657fe1e90d7ab35471f72f9

  • SSDEEP

    98304:swgfjPCkbYWdapDnxQlkBccFDe8nSArxRWl:sNJc5rmuc0IIRWl

  Score

  10^/10

  cryptbotcredential_accessdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2