Extracted

Extracted

• • Target

    alint Injector.exe

  • Size

    421KB

  • MD5

    0da7db970ca52a95cba75fcdaeffc234

  • SHA1

    ed3c5a22e314ecb49dc986850d7584507d28d1ec

  • SHA256

    2243ca5017e8cf7c354213ff586c9a356b6029c5066fca3d65993d721098026c

  • SHA512

    4d7df30b85e808207eb80dbe8e953ed3556959e68ecede9c1c2c7dbf78ef59dd58934216f1c8de8c33adbd36143e33402515c96bdfbbdbbc52f0a90ea9573087

  • SSDEEP

    6144:2LtdFT6MDdbICydeBvRaifWp93duW6jmA1D00Yp0YsoG6bx8LW:6dzJaifWz3BY1D8pXl8LW

  Score

  10^/10

  44caliberxwormratspywarestealertrojan

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Drops startup file

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1