Extracted

• • Target
    2026-03-19_4baa8c0a5b343c4aafa18d59b76bdf38_amadey_avoslocker_cobalt-strike_cryptbot_elex_luca-stealer_lynx_njrat
  • Size 871KB
  • SHA256 c75ea6817cce6cc171a9b4b7489b235c162c4538b04f5629b6aeb2f242228694
  • MD5 4baa8c0a5b343c4aafa18d59b76bdf38
  • SHA1 6da75d22194664336d832a2476e31f66a1dad20c
  • SHA512 015cff2e7c5c39bd46dabbde9c20b47ff2a7b069b9269a7ff33165f1e28b51f0b9663b7a9c9070b437f84c13731b7cb2448bdd9da9495beedb38b5aefff4e8d3
  • SSDEEP 24576:dME9lCEUEtlfyKbdkuiXwZ/D1RxwOwlSjUEr8bbOJAg:dNnD7ZkuNh94EQbbCAg
  • TLSH
    T16815AE82FFD250B0EB92217011F357F60E3976189B2199DFD2901E669A216F27A3F70D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoverycryptbotspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Cryptbot family

    cryptbot

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2