Extracted

• • Target

    quotation.exe

  • Size

    1.2MB

  • MD5

    6fd07cc698f01a40f0c23346c6a95157

  • SHA1

    2850203b7057b478cb3ee30544c558bfec6bc747

  • SHA256

    aaf048e30d5f843407f59bff320b992295396dc39dfb7bc6ca1c71f80897fecd

  • SHA512

    01d93603c60659ee9b661d7f5f79fb38c0ea15e92fd71c609669d11e4f0a6b4a968996631f9bacc6d8cb963e63e963196914602609ded7587d5e9238baf0b798

  • SSDEEP

    24576:bZ5cGp8NLce7efKxdX+M6mKx7+FTUQ4Tk2iXY+mzo3bv:l5cGp8NLceIKzuMZKx7+tUQ4I2slmzM

  Score

  10^/10

  blustealercollectionstealer

  • BluStealer

    A Modular information stealer written in Visual Basic.

    stealerblustealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2