Extracted

Extracted

• • Target
    ORDER H306116.scr
  • Size 2.8MB
  • SHA256 ed51a8723dfafd4df5c7c967ad6e597a7e9d0bbc8c58e0419c5be98688b59924
  • MD5 4823a94d01ba71fbbdf088223ba2362a
  • SHA1 dae32a4c05e67252246d7126444623b0a7e6eaea
  • SHA512 8f2b1eec43b27040648bb8de18c2ff167050fc94cbbe70dab343071a089bf5332f481292feec7a2a9a61c44c4070aafe932e4f40bdf080caffdecef15ebb53b1
  • SSDEEP 49152:zn8gQENn8aVPxXreWbDHnDGqRweXSWXTueuSqzG7vFdkOX9dp3EauaFMu:zn8gQEeaVpXreWbGKJiWXTuDSSedkOXc
  • TLSH
    T11CD523581617E203C5A993B40B62F2752B7A2EFAB110D3578EE97CEF7635F120D08653
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectionphantom_stealerspywarestealer

  • Family: PhantomStealer

    Phantom Stealer is a stealer written in C#, forked from the Stealerium family.

    stealerphantom_stealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2