Extracted

• • Target

    31549ee17789b9d35897451f2a8e3c6f_JaffaCakes118

  • Size

    274KB

  • MD5

    31549ee17789b9d35897451f2a8e3c6f

  • SHA1

    358fe857a54ad6047a808adef2dbffd94ce9ed49

  • SHA256

    ed4b34121d1f4957d8f6210d8af607c3f79179607a4e1f4d71cb6f00d81b2200

  • SHA512

    9e392034a4d51ca129c1dfe8690fbc112adb0eff43bf43246fc24b5035a9d0c8cfd0cff759933942be378ec6854c0be7af2e47b2d1ded306ed50339730d32f83

  • SSDEEP

    6144:Pf+BLtABPDtFxzerToNZrOGyvTp41V6GIeyXCRA1D0MGK:hFfNZrOR1Y69eyXn1DCK

  Score

  10^/10

  44caliberspywarestealer

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2