Extracted

• • Target

    JaffaCakes118_f845fcb8f6deb74106ecf33d3218f4e62e41583f574636d1f8100a4a4ce46fd0

  • Size

    387KB

  • MD5

    10705f8044a34859d05cb87753ba8069

  • SHA1

    5a64633a72ad22a74b381af8c0be1f39068fc93c

  • SHA256

    f845fcb8f6deb74106ecf33d3218f4e62e41583f574636d1f8100a4a4ce46fd0

  • SHA512

    76f8c23f3b213cffcc249e54db9c5ea744df07374149a1d2b012b09b02938efd9bd8ac489c15ca4f3a3c24eadce8a308576f1de3f430470f8d62d07ef056c7e7

  • SSDEEP

    6144:haTNtmVs7XZj0vjSUtcCPUNdkHMQV+u2bWac:haBtmMXZSjScCkz2b3

  Score

  10^/10

  cryptbotdiscoveryspywarestealercredential_access

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Cryptbot family

    cryptbot

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2