Extracted

• • Target

    300.exe

  • Size

    341KB

  • MD5

    4e87a872b6a964e93f3250b027fe7452

  • SHA1

    6ca5f55a9db5bda06f53445aa8d56562791774f1

  • SHA256

    92d45c19afa0670b233d9b594c617194957bd0cf43e05ee28eb041c4e04ee687

  • SHA512

    33c9fe635a8d43bfbfed2927c85f8db319ba138be326d3bc8983f4744567c027376c9ad2b6cd980f41275172495c2ea608d00890186e4fec8ca31406eed69f6d

  • SSDEEP

    6144:Jd1W+Wsj4spbNWAP6xvh5cw26aj1bSp4MFbdeGa0tFYXgGBIX:ptnjdpbpa21jyvRAg7

  Score

  10^/10

  discoveryphemedronecredential_accessspywarestealer

  • Phemedrone

    An information and wallet stealer written in C#.

    stealerphemedrone

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2