Overview

overview

10

Static

static

10

f2ebbd3a68...b3.exe

windows7_x64

10

f2ebbd3a68...b3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2ebbd3a6835c9c875475605cba021da3d2b2d55709d93f12e393187c3fddbb3.bin

  • Size

    274KB

  • Sample

    220301-wvb59scffn

  • MD5

    19436a38ef2098af82a13036a5495029

  • SHA1

    79e3068f9d8e55cf3a64e123fd45130580c25154

  • SHA256

    f2ebbd3a6835c9c875475605cba021da3d2b2d55709d93f12e393187c3fddbb3

  • SHA512

    941720eeed44f8d3a8b3e3be4e64f8d812f0f99e577b5da782b8f15f6997adb50b23c5ef5e9993bb3b75da180fc2e07ddda43fe8be92c4f7ab4108b30437799c

Score
10/10
44caliberspywarestealer

Malware Config

Targets

    • Target

      f2ebbd3a6835c9c875475605cba021da3d2b2d55709d93f12e393187c3fddbb3.bin

    • Size

      274KB

    • MD5

      19436a38ef2098af82a13036a5495029

    • SHA1

      79e3068f9d8e55cf3a64e123fd45130580c25154

    • SHA256

      f2ebbd3a6835c9c875475605cba021da3d2b2d55709d93f12e393187c3fddbb3

    • SHA512

      941720eeed44f8d3a8b3e3be4e64f8d812f0f99e577b5da782b8f15f6997adb50b23c5ef5e9993bb3b75da180fc2e07ddda43fe8be92c4f7ab4108b30437799c

    Score
    10/10
    44caliberspywarestealer

    • 44Caliber

      An open source infostealer written in C#.

      stealer44caliber

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks