Extracted

• • Target

    a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7.exe

  • Size

    28KB

  • MD5

    716d01d18140ec5e18b1a15c17fb213f

  • SHA1

    b4f2063ade43a0c6ddd15f3f34dbfde348e3eecc

  • SHA256

    a4191e00cd9dfeda78901ef9dae317e23c73408e7b4c1eeef8de6a8c70fe9db7

  • SHA512

    5ccc9c8afc8848cd64aaa0f1cdf03b27e0be3d89d01857a5e112dfa54391af627938bd186b157ffe86e49854b1fff536297e07a888ef2d0000364a9fb3bf8c55

  • SSDEEP

    768:4u3dYXhvK1Wm2k7/fwL1G8u+Y1mFcCbwh0:4u3ShK15WfY1mFcCbwh0

  Score

  10^/10

  gurcuspywarestealer

  • Gurcu

    Gurcu stealer is a malware written in C#.

    stealergurcu

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2