Extracted

• • Target

    Request for quotation - 445469.exe

  • Size

    602KB

  • MD5

    f6462aa84dcd781e3ef0398d565d6f7b

  • SHA1

    6b455aa36033be84072c6a353d39ee1fae4e6d41

  • SHA256

    369f328fcd9ea57d880cbf4d770290b2134fe68a7091fdc27d5da7ec313198e6

  • SHA512

    29420eeb155d40a0d86a1f5d2bd27bb708dd0f55d6c64cd79d0f6812744c8ab2b7d9493f32884cbe5a5fa960a90479a7c530dbbc01029e7af458ce3977bc0180

  • SSDEEP

    12288:XfpX2ycT2qM5DF6OLMwSwC8TL5JPGgkd6RZ3HlhV1ygZ5F5RTz6o:sPM5EcM/kLb1O6R9lv4y58o

  Score

  10^/10

  blustealercollectionstealer

  • BluStealer

    A Modular information stealer written in Visual Basic.

    stealerblustealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2