Extracted

• • Target
    f19eafacaaa51626c86152c1b5c38f865d3abbe112852f494b2cc099b1963f29
  • Size 433KB
  • SHA256 f19eafacaaa51626c86152c1b5c38f865d3abbe112852f494b2cc099b1963f29
  • MD5 8867093d2d5c13f3e2b05af9060109ef
  • SHA1 a4e2aabbdd41606de784ee1a6180186486ee61ba
  • SHA512 f47087eb9c9207ba94d48f1432e2656abef987dc46e486e9b4bade37f135eba0882030f62b7b73c144fe586731bac9c023bc2f97681b93d2ccbfd9d1dae62e4e
  • SSDEEP 12288:ZiLe96QwyyYjV3xcetmXlWglgicFTXmV:ZiLE6JyzjV32umXlVgiMT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  browserkitevelyn_stealerloaderstealer

  • Detects Evelyn Stealer payload

  • EvelynStealer

    Evelyn is a stealer targeting software developers via malicious Visual Studio Code extensions.

    stealerloaderbrowserkitevelyn_stealer

  • Evelyn_stealer family

    evelyn_stealer

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2