Extracted

• • Target
    PDF_47568.exe
  • Size 582KB
  • SHA256 9649094a155e904fc28617746d9656d499d04da6944e5201fa322bd1cbe1a897
  • MD5 66fe237302592c05ea3de09355f839ae
  • SHA1 2f59543388007374ac44e70e7299bb7af5390be7
  • SHA512 1a8f3ca0bfd585e5f209dce58a22218897fa83d47e2f8186026706377c6ebdad4a4ed424b9f2519d7fc3646340be7c6f42ab52cf9fed2a2d68c27ac89220547f
  • MD5 SHA1 SHA512

  Score

  10^/10

  spyware

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2