Extracted

• • Target
    2026-03-19_3f61d6cbfcd49e7ea214e3d71db61aba_amadey_avoslocker_cobalt-strike_cryptbot_elex_luca-stealer_lynx_njrat
  • Size 872KB
  • SHA256 7c9cefa2ca51c72371be46e98ca5a22cc51b9418712070befcc8ab0c94d719cb
  • MD5 3f61d6cbfcd49e7ea214e3d71db61aba
  • SHA1 7e085d2a47d42a9c057bf6c49e485e1273c76f41
  • SHA512 329f54f4f14017fe951c1e8459f40451079afb6ef679022e93e32a2115790538b3c21a260bb5c00b32fa90824ec7854b98388aef5824b08f6786aec8afdea316
  • SSDEEP 24576:pME9lCEUEtlfyKbdkuiXwZ/D1RxwOwlSjUEr8bbOEAg:pNnD7ZkuNh94EQbbfAg
  • TLSH
    T13215AE82FFD250B0EBD2217011F357F60E3976199B2099DFD2901E669A216F27A3B70D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoverycryptbotspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Cryptbot family

    cryptbot

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2