Extracted

• • Target

    InvictaStealer.exe

  • Size

    2.2MB

  • MD5

    46eb69930070f98a1d04c4b1405a0b73

  • SHA1

    3d9cb746fc06abfa125a7b27741b1f166fdeafd0

  • SHA256

    e35947652d5348f426eb924d33ef17ccf73247c70cf407d0f28ab726f666ae7d

  • SHA512

    319828ede2f89920821074c9d7da22ff0bb4a94537d53801882584f07c8e949348892e68e710806ae15191aca13b5972223faae1a25df153f6dbc52c608855d6

  • SSDEEP

    24576:OOfsfKozBKHAhRh3KzPSA7R7Bt28SVSVlzyQOQZ9IEb68vL4R+2pYJeCYMXABtd:PBozBdhEV7q8bOQnIFWY+3Je0wl

  Score

  7^/10

  discoveryspywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1