Extracted

• • Target

    Request for quotation.exe

  • Size

    561KB

  • MD5

    e3572363055d9070ca4fd376822e6c7d

  • SHA1

    9ea70096aa52e63a4c9a8cbf9ac762cd5bab4e3c

  • SHA256

    5820d2d9198e0f6ac65879bf61d8e3d3018ddfef8c6d8ae62ac32b4b8e3201c8

  • SHA512

    2129d7c8ea635f06e1ef420c07a6875d081ebbd9cc41fe025ebb041ee5f3608fb54fe4b8ea7cc841f6afc3c41512f6cc55bbb1504350e4d96df11ad01889c1a8

  • SSDEEP

    12288:QWk9HkeZxrHKJOG23BSDLjy9wtLFaWuehkvTh0l5:BGkKxzKJOd3BSHjXFv010P

  Score

  10^/10

  blustealercollectionstealer

  • BluStealer

    A Modular information stealer written in Visual Basic.

    stealerblustealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2