Extracted

• • Target

    94b3f2cd0a0c184c2538b257654b6bac86454cfc56fb0c55f6c407dc608de34b.exe

  • Size

    2.4MB

  • MD5

    32ad48e02ef9597a3e29a77dff191446

  • SHA1

    6daa7288df7fc8f67f22f9b2b5716642df04d43b

  • SHA256

    94b3f2cd0a0c184c2538b257654b6bac86454cfc56fb0c55f6c407dc608de34b

  • SHA512

    f37d438a0cd98bb217e5beaf46aab99c9bed37d456db23d91420cf5904e49959f5d0bdbdc91a781317fecc111efd37c9d68fd533a2c5a907ace77f0b60677578

  • SSDEEP

    24576:+4YsDAbKJyb8W6YUY0IP0uuM+0SPaTd1dr2KquDHFBlGFpgILv8+UXl3RuQ5531T:+4YsDAbEyb8XTV4FBlGFpgID8lXl3h

  Score

  10^/10

  erbiumstealer

  • Erbium

    Erbium is an infostealer written in C++ and first seen in July 2022.

    stealererbium

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2