Extracted

• • Target
    583c1eb6360379032d7cf7e6a60e09cfe74c7ecd36174016f293b060537fa52d
  • Size 151KB
  • SHA256 583c1eb6360379032d7cf7e6a60e09cfe74c7ecd36174016f293b060537fa52d
  • MD5 f635582929e0b0f2f18e1ee1fb7a84e9
  • SHA1 1d4946ea77a2bcf432f490d0a38429102a51069b
  • SHA512 0a4ac0362ebf4ce81fb187d93898e3ffdf74e6a0da96913818ebbb59a236a3897ec680cdc4599a9cf8cee8f8b7d527c4fc0abf89016bab48449995d10065d1e7
  • SSDEEP 3072:mQHKadVFHUg2HiFI9ifi5iLLbyq8QL+wI7BJlwEKctby:BqSF/2HQlLLbyq8QL+wI7BJiEK
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  xehookstealercredential_accessspyware

  • Xehook stealer

    Xehook is an infostealer written in C#.

    stealerxehook

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2