Extracted

• • Target

    VT.exe

  • Size

    274KB

  • MD5

    7902a5bb28c77d19f2d98808397c467c

  • SHA1

    9e798ca0781b06545baf104754d5850537e6a5b7

  • SHA256

    1b67d363cbfe3c649640e6ff890199441c0adf8e16677b6b6c11669497d94b0d

  • SHA512

    a20190a99969f98297dbba5d2eba9e9da9bc4fef8cb2cf74c26304401eed45655f4bb327339cf716bfea3ada064c2f7afb3281fe3c960e7be817e8a87ce8b68a

  • SSDEEP

    6144:7f+BLtABPDLgj1xw1eO5rbMMzhgUsYqTXGR7afTyUlI1D08eu:E161eO5rbHHsYqTXGfZ1D2u

  Score

  10^/10

  44caliberspywarestealer

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • 44Caliber family

    44caliber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1