Extracted

• • Target

    2eae4fc3c124605b2338b611578edf2f.bin

  • Size

    84KB

  • MD5

    2eae4fc3c124605b2338b611578edf2f

  • SHA1

    664bb5841207c075ecc6c82943b6e54d0295bcf2

  • SHA256

    64503745802796c734b5c3b6e62a5ba2b40fde46fe5a3ea1e8f7b37b49b2df92

  • SHA512

    af615e1346bad0f6fe907dcd7f7f9f184c302440f94b3cde103979a171d84ec753852d6054f9d7e294563dd6bfd7c5b4e5388203183703e5760fa68927f03bfd

  • SSDEEP

    1536:e49Lu+af58EPGTtZln8WKSO5T3rZ/SwEKSK99jzpme:e49uf5/PsjntS5TbZKwEKSK99jVL

  Score

  10^/10

  phemedronespywarestealer

  • Phemedrone

    An information and wallet stealer written in C#.

    stealerphemedrone

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2