Extracted

• • Target

    ebc6d55a45996861c5a84937d2a990da.exe

  • Size

    275KB

  • MD5

    ebc6d55a45996861c5a84937d2a990da

  • SHA1

    db9e42e191c95168d03274cc4d0ab18e35d3f314

  • SHA256

    42f1065841dc77643d3a3c33fb40de4c2931e3a4d15d9802fff0a194c821ea2b

  • SHA512

    927560123afb2d46c4a57065402182bf5522bc3be9d4d9593ec79d72eb4fdd12edc85dbe77d24e2801550bf1c09ac950521b52a62c384de2aad2304edf8db477

  • SSDEEP

    6144:Wf+BLtABPD9FBWKXsSlrVPl/9rHxlqQy8ERA190AxR:sFsSlrVPlJxlNyW19vR

  Score

  10^/10

  44caliberspywarestealer

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2