Extracted

• • Target

    NEAS.dee6a81c85a6ed68832f156199460200_JC.exe

  • Size

    112KB

  • MD5

    dee6a81c85a6ed68832f156199460200

  • SHA1

    a6f7a512fc6342359f5fb0d2fb6daeb6758968b7

  • SHA256

    9fc54308fc7277d352b8edce67980aaa4e83592fe9bab5b0bf8eb6570116be44

  • SHA512

    38e8b04d344afed7e23011b8e9053e5da164f9cd525849c823ff0b1afa49fadd7e1dabf0a863859cb49cac919bf4be14a8abd3fe83829a2da9dbf8afaf0a387f

  • SSDEEP

    1536:lgEnK+kITPGTUSr4xFWKSO5T3rZDFgSwEKSK99jzpmt:lgEK+kUPpSUxAS5TbZDFJwEKSK99jVQ

  Score

  10^/10

  phemedronespywarestealer

  • Phemedrone

    An information and wallet stealer written in C#.

    stealerphemedrone

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2