General
-
Target
9a07408e7914dbaac53d23756d2471b9e6a781d993cbe34a61b6dbb50651c2e8.bin
-
Size
274KB
-
Sample
220301-wtgpcscfdq
-
MD5
8dbfe1b50dc3a2270110201d54adff0a
-
SHA1
71504492a77bb56acfdb35008d667d51d2b43c7e
-
SHA256
9a07408e7914dbaac53d23756d2471b9e6a781d993cbe34a61b6dbb50651c2e8
-
SHA512
864ea5f844723c12d506e1704dc3331131ffb702df9e6bfa555af18d9b536affe39465e3b0ddf7c28bac27d0e0f54e3672d316a5e341bf2549bb78fdf6aa0a9a
Static task
static1
Behavioral task
behavioral1
Sample
9a07408e7914dbaac53d23756d2471b9e6a781d993cbe34a61b6dbb50651c2e8.exe
Resource
win7-en-20211208
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/940311939115016313/WAo7Di7NoH_OzgcUfYlj6OV8WmrOYG24yfbOy1uT8znuGIEPOhhcWIgtRBfqinwZXSt5
Targets
-
-
Target
9a07408e7914dbaac53d23756d2471b9e6a781d993cbe34a61b6dbb50651c2e8.bin
-
Size
274KB
-
MD5
8dbfe1b50dc3a2270110201d54adff0a
-
SHA1
71504492a77bb56acfdb35008d667d51d2b43c7e
-
SHA256
9a07408e7914dbaac53d23756d2471b9e6a781d993cbe34a61b6dbb50651c2e8
-
SHA512
864ea5f844723c12d506e1704dc3331131ffb702df9e6bfa555af18d9b536affe39465e3b0ddf7c28bac27d0e0f54e3672d316a5e341bf2549bb78fdf6aa0a9a
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-