Extracted

• • Target

    bb0a44e79b092106f1f55f80f5a5554c

  • Size

    320KB

  • MD5

    bb0a44e79b092106f1f55f80f5a5554c

  • SHA1

    63025a44274e6d89e95ed9c5cb79f8c3a371528b

  • SHA256

    17a5e7c0ddc39e588648b9e84e2a4c6ee8243558a6bacc3eceedb8c57ae13e04

  • SHA512

    12f82d46c5ac7a78742bc539018461d4699fd2297cf4adbf00d47d57452f2d013aab03644ec35398c66a5607a4ee1839c4287311947699bd92e3581af45fa0e3

  • SSDEEP

    6144:tKAWzXyGLOeQS1+O8+Z6drfcF0NaanahA0z0CPI4O7c5l:tdWzXyGLOeb846djcFQEZOo

  Score

  10^/10

  44caliberpersistencestealer

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2