Extracted

• • Target

    f04444ba33a73f6fa9770d0330cc489bf8b919f6c3342b66e3f423894ea22f2f.bin

  • Size

    120KB

  • MD5

    40b3c1644d3bd1702fdde6eb08f961d2

  • SHA1

    b6ae788abe3a524910bf2353dd55ab0fe831a7b2

  • SHA256

    f04444ba33a73f6fa9770d0330cc489bf8b919f6c3342b66e3f423894ea22f2f

  • SHA512

    85b2fedab47670714df9773ce9a6c2bf6701483a208aef087ed483f8b202b8ff04d4fcbada0fca63f668e60082fd226c4038138f46cdc3efee0093ccb286783d

  Score

  10^/10

  allcomestealersuricata

  • Allcome

    A clipbanker that supports stealing different cryptocurrency wallets and payment forms.

    stealerallcome

  • suricata: ET MALWARE Win32/ClipBanker.OC CnC Activity M1

    suricata: ET MALWARE Win32/ClipBanker.OC CnC Activity M1

    suricata

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2