Extracted

• • Target

    gamesense.exe

  • Size

    275KB

  • MD5

    06d26e80e55344a8a483c357d2c93361

  • SHA1

    791f3e4a55785b940dfd335b9bf408a276b95258

  • SHA256

    0e9d0fb06c0f889d46fac8b5d9afeb4a503ac39a73742729ec38a83cf48c3623

  • SHA512

    504bea28b846edb81050792dc309a79d17c312df58b3fb363ecd6b281703c575ac9e643c91749fe15c9bb344de0124fe160e0e1910583857919c8fdc3d5750fd

  • SSDEEP

    6144:Bf+BLCABPCSyu0Y6/8eaxLaqJCVImMOAle0EO+J:8yvZaxLaDVvgle3J

  Score

  10^/10

  44caliberspywarestealer

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1

• • Target

    loader+vacbypass.exe

  • Size

    80KB

  • MD5

    fc7ba0d39de049bfbe8bbea22c662402

  • SHA1

    4ed5a84cc422da30edfa6be6485143b5718fd259

  • SHA256

    77f2c591f0fd07d923d9ed0c014a7c4cb524aa0d1a293f0de94641d06d7fefb7

  • SHA512

    920712f43fd2f541f630e530a79580eee82ecc4c5983604dc8b8286d2baaed050737e8794e644944a752b04452817aeb963dd8263b2d8f99b0a468ab1a22e992

  • SSDEEP

    1536:o2Y0VNblnigen1FQGpaika1PASjg/oyRp:o23rbZi/8GprF3jg/ocp

  Score

  1^/10
  behavioral2