Extracted

• • Target
    SecuriteInfo.com.Trojan.PackedNET.2370.28664.4159.exe
  • Size 666KB
  • SHA256 6a7f6e48b589e6eee6e86ad54eddd0d9046072e1e11ebbba021edee8ff23ca71
  • MD5 637e6aa9ee8734fe41059a83d3191d5a
  • SHA1 71189f16029980a76b19c7f7fbf39f34d8c6ac18
  • SHA512 96a7467390a7143339854dcab457108dd8833ac4bc16aeeef650f2281bac4cbf7849e1d264a0c65e92972b4b747751e29a7e15c350bf3d34ecc1e61c5aa0cba2
  • SSDEEP 12288:oV5xcfX9K7o2aHo0ZotVmQbT6irI5xsNZBytaJ9eBUKD:bftgf+oGxir4sNStaTMU0
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  spywarestealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2