Extracted

• • Target

    quotation.exe

  • Size

    661KB

  • MD5

    3447635f58aa5581db95a3829b004f5b

  • SHA1

    e9275447f8fd436b726a868025f49412b5cba811

  • SHA256

    8c575aa5e93a77f506411780e84f57617a784605557c36053bc3535306509f03

  • SHA512

    7c6570674889496a206ff8c52e954ae40d948ee4ac4d20fb42f47abc48ca3d469617b9a76eadd39c9c77a9136c69d3c9df1f213cb3dbbe1c79d337bf19dee8ba

  • SSDEEP

    12288:jCfAg0DqCrZVRr7s2uUBdx5bwY8nmX5nadvQeQPR:jmzGqaZVBmUnxympnKo/PR

  Score

  10^/10

  blustealercollectionstealer

  • BluStealer

    A Modular information stealer written in Visual Basic.

    stealerblustealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2