Extracted

• • Target

    bilds.exe

  • Size

    626KB

  • MD5

    ae84bf01058b29c178ae724df445c0c8

  • SHA1

    708700eed0aecab74a4198dd59ffc49fb81d4523

  • SHA256

    3c5a8e9820b549a70a353997bbce4fe16956dbab22dedde2f358f0f10930cf44

  • SHA512

    ebf382ceeb5b6be4ca65ac53cb56222cccc5c5b6f6e42e31cdfaa7963cc654f1e889ecc6d8be705a9d553a2229a4b250793d98e038b6c1e68609bab2c3c166c7

  Score

  10^/10

  blackguardspywarestealer

  • BlackGuard

    Infostealer first seen in Late 2021.

    stealerblackguard

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2