Extracted

• • Target

    v2.exe

  • Size

    271KB

  • MD5

    b28df9eedaccce71166a5b689b145f43

  • SHA1

    530a22fca9f46f727400c40ba1a241c96c258d25

  • SHA256

    b0ef37465f4bfd44ac7f62e3e0243788bbfeb437e485df5b85e17c9d1ee3b7fb

  • SHA512

    ce1ede97a8a1adb88a6aa94647336bd395b81f9970188016014725ffacb23ad428db3c5ccbd565ed8ed6af13ea2938f73af8cf395b41a80f2e8deb1edc826a4a

  • SSDEEP

    6144:JmYKJMVRp9hnmy0UYU9B93YUnLbBa2X3Rb36h3jQ:6J0Rp9hzL82ghTQ

  Score

  10^/10

  blackguardspywarestealer

  • BlackGuard

    Infostealer first seen in Late 2021.

    stealerblackguard

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2