Extracted

• • Target

    build.exe

  • Size

    137KB

  • MD5

    a045a154a0c3fd9fabc93aa2afa27ee6

  • SHA1

    ce55ad3bc315b9145023624427f8e1121c73c28f

  • SHA256

    983ca6cb08c2ea00dbf5e429bfa0df2153a889b13f42648443795b85e7bf8880

  • SHA512

    ff20c48d528ff7eaf1cead5c4ffd8dc00ca51ec6b44a793dbf3d6cef77cd3bc95c9f8bcb38244886a6db60a4c05ebf69b54f89ed3d53a9eaa38736994c5c436b

  • SSDEEP

    3072:aVvH8RuVrLyEj/S2CUGACcceJd/klDHa/R8mxu3s8Qo5u:KH8RuRLlzgUd6a/Aslo5u

  Score

  8^/10

  credential_accessdiscoveryspywarestealer

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2