Extracted

• • Target
    kb2.txt
  • Size 726B
  • SHA256 6905b4b4bc10a37ef57a613505702236938049bd3e05832cc916b35b1f5abdf3
  • MD5 403ce3c4092ca1589c005ea1c3529c47
  • SHA1 9a2b3a135ca014a7e3938d3c4ef752dfdbe60fdd
  • SHA512 b1d75e3de5b014ab197ef8d1b06b6149da8d1d0a0f09f4bd798a6d4eb258c049a2bea753235d993db69ea1d93120ca7c46a297766b327bb5ed562d7056b2e4b7
  • MD5 SHA1 SHA512

  Score

  7^/10

  executiondiscoverypyinstallerspywarestealer

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2