Extracted

• • Target

    MentalRun.exe

  • Size

    274KB

  • MD5

    18430d2473925ac89be6519d60022979

  • SHA1

    a48a0badf5ab80de630fc0afaa79fc69a5bc18bb

  • SHA256

    ab49f788d53435b9657f8f1e2dd58de104d52ffa9fb97898aed8f44e7354efbc

  • SHA512

    6390bcd592ea313535a474bba33d4523a1e773921337d47cbb020cbbe61c2f35ff386de2b12f2eb1035624748421febd41df210480dc10d63927608ebf333385

  Score

  10^/10

  44caliberdiscordurlsspywarestealer

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • Detected executables Discord URL observed in first stage droppers

    DISCORD URLS.

    discordurls

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2