Extracted

• • Target

    e4c58ca4fe487845e33f4976a92f5d1cab56f3ccfad3aaaeba9ad036dea592fb

  • Size

    1.0MB

  • MD5

    b7857ce68b39934b8f2058fa4348e020

  • SHA1

    2fcf50364b2fc27e4859adbd4e0a02a600c079e0

  • SHA256

    e4c58ca4fe487845e33f4976a92f5d1cab56f3ccfad3aaaeba9ad036dea592fb

  • SHA512

    3c7861b36adb535dfdf7a8438ea0ecd6fe6ab78e8deee9b0e805e60dc68744f787ebab00fceb2f830c36a709669cf79b23efd6767a7af3433516372aeed3f7ad

  • SSDEEP

    12288:ZpTqX8FsEYd8uU6AxywWy3LGrZtgWS2iNVNhFQVNNeROg9SA1L/xATqjJ5nxKAza:e0W6P10ncOg9SAPrjrxZGsfhbBTd

  Score

  10^/10

  allcomestealer

  • Allcome

    A clipbanker that supports stealing different cryptocurrency wallets and payment forms.

    stealerallcome

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1