Extracted

• • Target
    ace468a702a05427fdf780815acf71d7bcf83a03269a997b0ffa41450e7d9769
  • Size 6.4MB
  • SHA256 ace468a702a05427fdf780815acf71d7bcf83a03269a997b0ffa41450e7d9769
  • MD5 11720f15b41a83046d490ac644da953f
  • SHA1 9235798145b595bc0db851f71a665e0ac45cb39f
  • SHA512 31c4dcc59a03920fce082221ad5d0dc7f3fb165a101ee9e94c40713d97ba294f6873e222b2b1ea08aeb955e6a04bf3910006d69b914be07f6081184e33c2fc05
  • SSDEEP 98304:3Fw4kkReu7w2fxPjf3RONid27PHG7g5PUv/btZzbF:3Fw4PeOpbgQ9RRbF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  cryptbotcredential_accessdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2