Extracted

• • Target

    c1cf23cf49d7406b02b538db9d9636209c706d3f2fd9719bfda55aef5f65cbaa.exe

  • Size

    1.6MB

  • MD5

    96c62ca985ed966d7c6d274caa5bb41a

  • SHA1

    97842b7b0d381ae027f8a92787ffff84eca2a698

  • SHA256

    c1cf23cf49d7406b02b538db9d9636209c706d3f2fd9719bfda55aef5f65cbaa

  • SHA512

    66e086fdd0f39f0f166c3d9253805de4095e95b47eee38393a113e2279d4f90c13c8584f3827f45c85b2bca71a9119a48dca6f59d006d4015e9c2f6dafedcde5

  • SSDEEP

    49152:LkTq24GjdGSiqkqXfd+/9AqYanieKdsG:L1EjdGSiqkqXf0FLYW

  Score

  10^/10

  stealeriumdiscoverystealer

  • Stealerium

    An open source info stealer written in C# first seen in May 2022.

    stealerstealerium

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2