Extracted

• • Target

    4538e3df24ed8b8cd6a3474b2f0e1f74_JaffaCakes118

  • Size

    621KB

  • MD5

    4538e3df24ed8b8cd6a3474b2f0e1f74

  • SHA1

    e3b567e2b004c3a637b04a082b0ebbf98d6d37e0

  • SHA256

    46c2df358cebea0eed3ae32167c399a445ce0f106f473997775889f8ac2ca733

  • SHA512

    2286929bf5a7aab9e9aa88573fcea5dfff97faba7dff4aa9ca3754b7e0df48a511b46f97a17e25286a19ecdfd750e1660d4b15146b2b5cb9779c7790db299027

  • SSDEEP

    12288:8LtsJ0XDsa21ugSSbujX45JbdSxqly5WxX8Vbc:ZJ0XyCU5JbWf8X8VY

  Score

  10^/10

  cryptbotdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • CryptBot payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2