Extracted

• • Target

    9f74c8bb7dfd699c81daee3a0ea20abe99e1c1000bda4fbc0ae68973ce344e19.exe

  • Size

    598KB

  • MD5

    ccc2c57329c6daf93c67bbf2bc6c1c6c

  • SHA1

    00a4da0406d18f2b1c63216638289fbe378956df

  • SHA256

    9f74c8bb7dfd699c81daee3a0ea20abe99e1c1000bda4fbc0ae68973ce344e19

  • SHA512

    fd12054b64f10bf3508519c8b1fd5219018cf57b4e53b6eb86556815a01dc4a274ea5b683f6502b4a3482ada349c49b7a76ed5f7068f9fde38fceac1ee6cecfa

  • SSDEEP

    12288:2hmJlVgb3RhUUAk1jlDPbCFQ9KF2WxEFh0O1BDoeTAKvAD2+12KcFIzeFHYVfA/c:2hS2BSUnpm

  Score

  10^/10

  discoveryxehookstealer

  • Xehook stealer

    Xehook is an infostealer written in C#.

    stealerxehook

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2