Extracted

• • Target

    7a35c91fbd4871c10b50ecb9184da53ff57f61e3bd242347b108d7eaf2327434.exe

  • Size

    6.3MB

  • MD5

    9c6348961ddfb93988d54adff5e45bfa

  • SHA1

    7fd1bbdb3f4e024d74b38088d99c5f3bee8f28f5

  • SHA256

    7a35c91fbd4871c10b50ecb9184da53ff57f61e3bd242347b108d7eaf2327434

  • SHA512

    2cb4b575738c33865bd656225c560ec837f832d8bf8e9927fc5e154b2ad6f65a1ee53b275fb10894ea9bcf813cc5e6d99f8aa8ba2bd4b3d7ebbd4e44620cd02d

  • SSDEEP

    49152:iQhbGEGVCjdEbS7IhzjyHP+M8zArBpP+puwK8kkIYjrSXmF+kTV7XU0Bt8su/hY9:2bSGSHH8zzEV8kk5S2FpVtBM/hYCx1E3

  Score

  10^/10

  cryptbotdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2