Extracted

• • Target

    d67a671a38113fd35c9641e21986e3145b55cfed8145b1152f0ceb091f05d4ae.bin

  • Size

    291KB

  • MD5

    ccff73a120d6a999553a1e835db041f5

  • SHA1

    570efb3ef55a5ef00e79a78b3e9d26c5d32d4508

  • SHA256

    d67a671a38113fd35c9641e21986e3145b55cfed8145b1152f0ceb091f05d4ae

  • SHA512

    80905bf30b07d43b88ac790e22a57d38111010de913362e265e806395d49b59f2f07123aaef1c364bb89d70a59d8170da9d4fbe578c7d14c388d3403daad4953

  Score

  10^/10

  vulturistealer

  • Vulturi

    An info stealer written in C# and first seen in January 2021.

    stealervulturi

  • Vulturi payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2