Extracted

• • Target

    HEUR-Trojan-PSW.MSIL.Agensla.gen-62842fba1bad0f14497d674dcc2ce5b74c6dc781b56d9be7b22abc0e6e84e299.exe

  • Size

    274KB

  • MD5

    88c05e490c59382d1d19886fe0fff325

  • SHA1

    e9cf39409ef4569c21cc10b2fd4f040e19b6a4ee

  • SHA256

    62842fba1bad0f14497d674dcc2ce5b74c6dc781b56d9be7b22abc0e6e84e299

  • SHA512

    7b4511fe6c98627dc57ac2fdb32083a38f290542bcbe08bd8ca566def4bf61e4e02db1e46d525ce946f0caf55fb9e0f1e43d09129e4992bb9bc1b3b39cf6e052

  • SSDEEP

    6144:af+BLtABPDWlR1ZroWT0Ilb5wqlYeJOlA1D0LfN:rluK0Ilb5/lYeR1D+N

  Score

  10^/10

  44caliberspywarestealer

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2