Extracted

• • Target

    131d6fb9204ceda508075afce9b9b65e429952674e914d224268deb319a0aab1.exe

  • Size

    305KB

  • MD5

    4309f4b4bb455f998d1fdf310cd83484

  • SHA1

    4ee10072d4dff28efcd64d8dcd631760868d644b

  • SHA256

    131d6fb9204ceda508075afce9b9b65e429952674e914d224268deb319a0aab1

  • SHA512

    3d730ec6e3b385a69fa62634f4776e98327bc8f5da6330b109d3de5b37339dcb97cf9bf489c548de23f6ff71b115e921d5179cf2606eba61783851462ba807bf

  • SSDEEP

    6144:zWmk/wokUNpuDoAVUx99rpABXHxjdgwJids6m+8suhyiP:NswuNpQv299rpAVHxJgw0dsp+dTiP

  Score

  10^/10

  cryptbotdiscoveryspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Cryptbot family

    cryptbot

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2