Extracted

• • Target

    PI-12042023-02.exe

  • Size

    1.5MB

  • MD5

    49dfa3ff454a308c963c3fbcf8c6281d

  • SHA1

    7ce1a8671508cf9449b5a962288d92a8cfca9a7e

  • SHA256

    dd108cf78013ce269848a78918fb30c55b4fb0c93634777640994fda1c79ec11

  • SHA512

    7ca847ff5f94c2d9654cc59f252bb96175515cfc46fca11bd40cfdbda676600ffb9eaedb9ad09632d14273ae251fc566d14b5ac3e2d0d0118ec95fa5c3d84735

  • SSDEEP

    24576:B2N8jiZ4zypIPs1JTDE5PjxDurIr7TX9OAg6/+tkF4PU35yys8NuQsRuj7+oboBv:B2N8jiZ4zypIP4JTDE5Pj0rI/TIbE+tj

  Score

  10^/10

  blustealerstealercollectionspyware

  • BluStealer

    A Modular information stealer written in Visual Basic.

    stealerblustealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2