Extracted

• • Target

    2_stealer

  • Size

    226KB

  • MD5

    a09c37144ca538b0bc4499bf59c691f1

  • SHA1

    eb997ac06e1cf56add73e5e4eed3c10a297d4bd5

  • SHA256

    45d58041f3aacdf2d3536c39e1db81e23e30c6372ca2bd3be8b2675d472b5d44

  • SHA512

    b449997aa327b281ceade8f11a14bdf1e197fb86e7dffbcfcb3d59c09532108c317f437320b267818e2919c06da21d31db4b6dca745470f7a1ed4f37455afebf

  • SSDEEP

    3072:NMU8dW6hNmf/ft5OPQFFlNqgAJcxoNF+rSoJdjayW+RCD9KrbLQ5inPCCb7bv/h1:NMPcnTMkFzqylSofjamrbLB/WEO5

  Score

  10^/10

  eternityjestermonika_galagercollectionspywarestealer

  • Detects Eternity stealer

    stealer

  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    eternity

  • Jester

    Jester is an information stealer malware written in C#.

    stealerjester

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2