Extracted

• • Target

    79d833993d87d2a09f6ba97c17af49e30483e7d934950c00c762ef5dc3893b84

  • Size

    6.4MB

  • MD5

    99848d0ddfc95e855c62d8932845ae6f

  • SHA1

    fc08e3d98922bc5de0c89968512c3fd778ba5e4b

  • SHA256

    79d833993d87d2a09f6ba97c17af49e30483e7d934950c00c762ef5dc3893b84

  • SHA512

    cf4194368335e63a42408f89102d85cd5f9ca8bb640970ee92ac4e95118b9cfc31a7c3a36b8bcdd84431648328c40c9b44333eb62fd639b1960d783ffd5e217d

  • SSDEEP

    98304:BkuXLm0IH9OJy/fZ6IcLWTMEKJRnghQICSeli4EekEJ:BXXLmz9OJyXZ6IkkArsQAqiPekEJ

  Score

  10^/10

  cryptbotcredential_accessdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2