Extracted

• • Target
    6c59f6d8524d9cbfb92e4937ce941503
  • Size 878KB
  • SHA256 237f6d600f9ecbd9e8d7f2091ea45734f9204b90c2c10b2837bc82b9fbe89e33
  • MD5 6c59f6d8524d9cbfb92e4937ce941503
  • SHA1 15257449da787af10c0800074fcf9c8c5f094057
  • SHA512 009d19406beeab9b5b1ea892e0e718e0940aed96dd7c5ec35dbd494facf61eea95df9b8b11d7108e136900f802e759129b10af5e945a3fac51ad47df834ec98a
  • SSDEEP 12288:IeZhPmY3tK2gs2hFQdALegUcRfVZEgDup/eenfS+jdi0ROh:IF9H5jQdGegfRfVRSdeafXjdrRm
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  a310loggerblustealercollectionspywarestealer

  • A310logger

    A310 Logger is a .NET stealer/logger targeting passwords from browsers and email clients.

    stealerspywarea310logger

  • BluStealer

    A Modular information stealer written in Visual Basic.

    stealerblustealer

  • A310logger Executable

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2