Overview

overview

10

Static

static

10

92d3f92a57...b3.exe

windows7_x64

10

92d3f92a57...b3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    92d3f92a57bf71f584fa0be94f75b4daba7e6e94aadb9a85a2d77c64af8201b3.bin

  • Size

    274KB

  • Sample

    220301-wtcqeabah2

  • MD5

    3c7d9d0478ec7ba56bc562dd56d3021b

  • SHA1

    9832832c2bd0038549c24d86173f949bcbefa8a3

  • SHA256

    92d3f92a57bf71f584fa0be94f75b4daba7e6e94aadb9a85a2d77c64af8201b3

  • SHA512

    5d0ecf41e3788999afbd9a4c994bff5af957c8e02017275c994ed8fb95f2708c262b8ed7b2eabb0b093bc16064df6d1b0e4e964c986351aa6f12db0867388ef0

Score
10/10
44caliberspywarestealer

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/940935755608498197/XP-3HscY5BUWZ9NjQP1vew4mGjibW0owME_BbFqPRs3r4Q6CVTJnmEubM-1hmIBMkyLI

Targets

    • Target

      92d3f92a57bf71f584fa0be94f75b4daba7e6e94aadb9a85a2d77c64af8201b3.bin

    • Size

      274KB

    • MD5

      3c7d9d0478ec7ba56bc562dd56d3021b

    • SHA1

      9832832c2bd0038549c24d86173f949bcbefa8a3

    • SHA256

      92d3f92a57bf71f584fa0be94f75b4daba7e6e94aadb9a85a2d77c64af8201b3

    • SHA512

      5d0ecf41e3788999afbd9a4c994bff5af957c8e02017275c994ed8fb95f2708c262b8ed7b2eabb0b093bc16064df6d1b0e4e964c986351aa6f12db0867388ef0

    Score
    10/10
    44caliberspywarestealer

    • 44Caliber

      An open source infostealer written in C#.

      stealer44caliber

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Tasks