Extracted

• • Target

    3b2f66471cc56be88ace1fe40c93b8a2

  • Size

    587KB

  • MD5

    3b2f66471cc56be88ace1fe40c93b8a2

  • SHA1

    486da8068d9f6c810c36f9f9569ef34683f72fa2

  • SHA256

    2476f5a94267f2702b73311feaaf335932c1f530b89f6af69122bdb1d8e72345

  • SHA512

    38922399e51e2111e3be4f7417ee46fba82bd12dd59be1e08151dd69679c1feeb4bc2c2a458ece77f3bd3b3a8820f9ebdfb4adb388545d956963958b637ec174

  • SSDEEP

    12288:FycFlEQ6I1pOq0NeVyC0Wf1cyDBB40rjoTgB:FysEmoqEnYf1cE40rki

  Score

  10^/10

  blustealerpersistencestealer

  • BluStealer

    A Modular information stealer written in Visual Basic.

    stealerblustealer

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2