Extracted

• • Target
    2026-03-28_4486d799b94ab448ceb979628d0d5795_amadey_avoslocker_cobalt-strike_cryptbot_elex_luca-stealer_lynx_njrat
  • Size 865KB
  • SHA256 27df222e178b40cf90c01d27a3b3443bc397b97620c1d55f740dce5279e512c7
  • MD5 4486d799b94ab448ceb979628d0d5795
  • SHA1 ff7b9d7c25f473fcfe3f51fa18539e0d6257f30b
  • SHA512 35cafe23b8e637419f96530175b643e13beae70d7784ea5c5626e7c20faff0b33dbb3a7f9bf645c00c7d9da7c01a94341a456df186b72bf04ac0bfa2472c8b9f
  • SSDEEP 24576:upfuQ04A9W+FNI9u4nReU2Vc5tL6x/DdhX5pY+ptoS0:YGoQS9uX1XDXHY+pqS0
  • TLSH
    T1D6159D82FFC290B0DB96217001F357F60E3676199B2199DFD2901A6A5A216F27B3F70D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverycryptbotspywarestealer

  • CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Cryptbot family

    cryptbot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2