Extracted

• • Target
    Burgan Bank Hesap Ozeti.exe
  • Size 618KB
  • SHA256 039676543cb62a651daa0570029334af7e19b6c2f2b5b3a083f1a7d6ebd3143e
  • MD5 b741d275962b6a594401b03e6f8c258f
  • SHA1 f69fc6c731cec9c189972d646f98ffd142e69610
  • SHA512 fb29439220b9d7159bff17017e5e1d894ba287249160ba8fcf94c2e52d277a89805f82b9230f2a62e16a2f7578726d87e34892f026a084aeea5d1a04e2fbb5a3
  • MD5 SHA1 SHA512

  Score

  10^/10

  a310loggerblustealercollectionspywarestealersuricata

  • A310logger

    A310 Logger is a .NET stealer/logger targeting passwords from browsers and email clients.

    stealerspywarea310logger

  • BluStealer

    A Modular information stealer written in Visual Basic.

    stealerblustealer

  • suricata: ET MALWARE a310Logger Stealer Exfil (SMTP)

    suricata: ET MALWARE a310Logger Stealer Exfil (SMTP)

    suricata

  • A310logger Executable

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2