Extracted

• • Target

    JaffaCakes118_7ebbb54dd8b2cc5aea696b2ad88abdbc

  • Size

    346KB

  • MD5

    7ebbb54dd8b2cc5aea696b2ad88abdbc

  • SHA1

    b1ae8ad0ff5ba202b5783d951be5d4aee2e92600

  • SHA256

    4ea07b9988b03173d35240bd56cfe6b16b6f5721c62d16129c9d974bbab92d04

  • SHA512

    603c898492ea2ec7e0a4271d02ba1c0afd38a7abe9e8bcf1d1747dcc705530bca1537d5e16a3b06af5170c9ce17c0c5a417fbc8679529994bb92419b2fce53e7

  • SSDEEP

    6144:6o6QtEG7DLMyJ6NhhGgIEX9noRJg7AcgtVjiIADG8el:6RQtE8LNJ+nHjFoY7SjixD

  Score

  10^/10

  cryptbotdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Cryptbot family

    cryptbot

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2