Extracted

• • Target

    20dd766d851ee41f934768bdabba5028747172a5855e946f47369928d9d9eb9dN.exe

  • Size

    137KB

  • MD5

    183031b960df2a44031ced3c644763d0

  • SHA1

    2bffb1fab5b0b54d0e4f62b754e564dc15715c85

  • SHA256

    20dd766d851ee41f934768bdabba5028747172a5855e946f47369928d9d9eb9d

  • SHA512

    2dd69c2ba9b3a6dc7fcab27f83de20284217871bcd7eb920abbb4adea72870d469a74497803de5664f2963609ca99ac730ffc39712f05c9ed556cbd524f329fe

  • SSDEEP

    3072:/GH2azxm8xzWtlnEaaXi8LvgXENeT5LisfoHdVAZrJ:im0ivahvDeRdfIdVAZ

  Score

  10^/10

  phemedronecredential_accessspywarestealer

  • Phemedrone

    An information and wallet stealer written in C#.

    stealerphemedrone

  • Phemedrone family

    phemedrone

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer
  behavioral1behavioral2