Extracted

• • Target

    da1a48c1c6d3ceb484662f8176995e31189f7b1bedf3593b97af52e80725ddf3

  • Size

    816KB

  • MD5

    d355f9c6781602f4f6a997309ee381f3

  • SHA1

    4333f269522ebe26755389f8801f2ecf7d848dec

  • SHA256

    da1a48c1c6d3ceb484662f8176995e31189f7b1bedf3593b97af52e80725ddf3

  • SHA512

    8553263f95fc17206d89a1e45345d0364821e6aae2fe26fc79cf647fa10785e1f277bde87c8e1c011bcce55be52714245d9963461895d5a261c9b37270882af9

  • SSDEEP

    12288:HUX37iJUZe+cLXpNhOn+YRCdX3WcqNlQZGEfrw5trT56O/x4a:HUXLiJ+TihC+qCdX3W3NSZpMhZ4a

  Score

  10^/10

  allcomestealer

  • Allcome

    A clipbanker that supports stealing different cryptocurrency wallets and payment forms.

    stealerallcome

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2