Extracted

• • Target

    1250791dc7fafbc36f7f077aa6007b01691b6a6dce8d11b89bd145e1c9e296fd.exe

  • Size

    303KB

  • MD5

    d291f905e383d6e79e9987aa97fe85bc

  • SHA1

    6ea71043ac14a0b333f6ffa12131da4b5aceaf83

  • SHA256

    1250791dc7fafbc36f7f077aa6007b01691b6a6dce8d11b89bd145e1c9e296fd

  • SHA512

    408cc1001e704a5ef7665467cd38d1118c7713ea955300b087f2701fc99846568ee489d48f6823fd8c64d5a1075dfcd14019d4393b9917098c22f3186ee43261

  • SSDEEP

    6144:av1T6MDdbICydeBxbf0G3aLpbwsY6kmA1D0lCrR5:avD10G3alsb31DWyR5

  Score

  10^/10

  44caliberspywarestealer

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • 44Caliber family

    44caliber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2