Extracted

• • Target
    Enq-Materials 16-07-2020.exe
  • Size 539KB
  • SHA256 553b801aa1605c3b37ac486b30904215c63316cbbb3715d0e5a422f4c0349cba
  • MD5 de5de1e82e97b1fdc1af4dc949450cfc
  • SHA1 9dac237445b60956a00701ff7339bf6a0700f4c5
  • SHA512 5cb743af3164d0f6b296a8225bec8260ebdfe648bfabeadffe99aa3236415d39f44b42b5884ef71e2e77bf2a74fdc13b3b1f9f057f5cef241f0dc36b142421e8
  • MD5 SHA1 SHA512

  Score

  10^/10

  spyware

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2