Extracted

• • Target

    tmp

  • Size

    121KB

  • MD5

    b20ca6fe5b3bee70b53659f5faa67363

  • SHA1

    bccd58ad085f34263a2cc4c3763cc8494f1b96d7

  • SHA256

    2feec256a92e51a00f8ed6546bac741beb33beec29225bf74eba71cb6e8562a0

  • SHA512

    24a72e3834004af4fe432c9b616a8e3d3c14c50b9fbba70c70e2f9919cdfcf5e204c5e4c53f78e82c7d18ca764408654143b3ab0fa3e943070b6ec6355156ab1

  Score

  10^/10

  allcomestealer

  • Allcome

    A clipbanker that supports stealing different cryptocurrency wallets and payment forms.

    stealerallcome

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2