Extracted

Extracted

• • Target

    Sеtup.exe

  • Size

    6.3MB

  • MD5

    eebe576682c06edd80c85ebbb233137a

  • SHA1

    7e76de8b6327bc30674f238d58a0ff10b2bbc407

  • SHA256

    39915a2e90308e2369b8ba89e5b6bb9fd77a8501d5d1120576192976da544e52

  • SHA512

    fd4628ab0264f8ac2b84bfcd7a1b5a43d6ea7f4c53511d18fa9a11c1ac0083a9a088b5d097f8846a1763aa0cffc317e13d4bbb2b38b9218cf5dc959cac171549

  • SSDEEP

    49152:SS5ztgGV9O6DDcAMeyZQZl4weZCK/IrY+/cTlwWdSfU/Mt4jDJ9aRxqn+J0L:SS5zbOmcAMrO4qeIk+qwWdWMdYyc0L

  Score

  10^/10

  cryptbotdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2