Extracted

• • Target

    UHAP Sorgu.bin

  • Size

    274KB

  • MD5

    918437b1fb7cb9007f0d439396cc392c

  • SHA1

    1889c245e9eb55889f40f42efdd2315c40ce414e

  • SHA256

    05192de4246ba6acd7799d2137b4a1f1ec5520d129d68cec2b2976b2c1bea90e

  • SHA512

    b2df6e41d0376f4f7c8b2144aec63f5dd55f82e8acc8d25b318ffb443bf32de637ae6c1c0ecc00278bef9d59c2fca515cead5690c9b19669adefdbc6205aa0ef

  • SSDEEP

    6144:Yf+BLtABPDlgj1xw1eO5rbEMzpgUsY3hiGUClYeJilA1D0c3/:1161eO5rbrHsY3hiG7lYeV1Df/

  Score

  10^/10

  44caliberspywarestealer

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2behavioral3