Extracted

• • Target

    6734.bin

  • Size

    504KB

  • MD5

    ad576a5e9a73e049d4b2fd7005c4790e

  • SHA1

    781c71c7ed316739e7aa6f44072139827eca228c

  • SHA256

    9ea90f0a5b0bfa5de1e5aa7eb43000eae8f1c034e5e0b7c3fa97c27e5bc7a8b5

  • SHA512

    3061d30fe1a3c8201bbd4106913b03ffd2d16122a8a6f04f8d1023e490589b44b862cf98e08ddfe6b44db79cb904c7f513c1659f1553187ece27429d59cc2357

  • SSDEEP

    6144:aym/c4Dyv3TxT8jWHgf8YJkVHC++VeQPBZnq0LZYSwFxQx9tPHh1DTbhXBZdt/vZ:eEpmWHgf8Y6/Qp1nLiDKs+pN1UO

  Score

  10^/10

  gurcuspywarestealer

  • Gurcu, WhiteSnake

    Gurcu is a malware stealer written in C#.

    stealergurcu

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1