Extracted

• • Target

    bilds.exe

  • Size

    920KB

  • MD5

    a2eb83b612f03802d77d0fa187fc15d4

  • SHA1

    98467348a2cd31f5ec0bf79909d48798ba3d6409

  • SHA256

    b287dcb70b7a9ed7025171572a96f1447efa6adf88cd30aba591270052acfe8b

  • SHA512

    7ae166157f7595e8f203408a3ee1e46bd540345cbc9f19a27d31c5de7cf16cba12094aa63ed5831c1aa6ed59344d3362608bfce49b4670ff224a82b46bb0af79

  Score

  10^/10

  blackguardspywarestealer

  • BlackGuard

    Infostealer first seen in Late 2021.

    stealerblackguard

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2