Extracted

• • Target

    Setup_32x_64x.exe

  • Size

    785KB

  • MD5

    fa388cb487e6a30efc90df8d6a54b430

  • SHA1

    3707474e14ba8df589682edf4e6a1cf020ce9862

  • SHA256

    17f6a6c407112e236586d078a77bef0947bdae149bf8c6e025bd9d0c479f0e3f

  • SHA512

    92bee7c92a451cb1ad06a8ca1f634a7c8d4aeb340fb70129d337b8ea3797df73bdf45bcf49fc38d36a80f034a62ce25029bf639199cb3815499ac9e7c2e81c29

  • SSDEEP

    12288:oU2JEwzrwsblKWWG6YDsLViPaPr5RpGJ/zs87GSu:cqGrwsbNnDsLViCPrISIu

  Score

  10^/10

  cryptbotdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Cryptbot family

    cryptbot

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2