Extracted

• • Target

    d176e50d489f6ed1109d9954944877b6_JaffaCakes118

  • Size

    609KB

  • MD5

    d176e50d489f6ed1109d9954944877b6

  • SHA1

    f23f1dd77727fc85fcfc8227c6d6021803e5231f

  • SHA256

    4a26bf04a82781ba937c450a3ebfa33556aec1a645fa820ff8cffde9b2b5a240

  • SHA512

    a0d316a84bb566d409cb50b0d8612960e8ef280f936b6838e23a9e8f85201e1d9dbc3ec4234d6859d19514621190ce6fd925f6ec06dbce208165ceb19f262c51

  • SSDEEP

    12288:w2DMbd4yPDeCpZNqmSr/U7wpgGBp4NC7D7M9C5vYpM:pMCIeC5urKwFp4NuE9aA

  Score

  10^/10

  cryptbotdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • CryptBot payload

  • Cryptbot family

    cryptbot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2