44caliber | MIDNIGHT FREE[.]exe

General

Target
MIDNIGHT FREE.exe
Size 274KB
Sample220406-m2q4bsfcfj
SHA256 00050076a05669ce423524fae8c5d6cd1ee3aa837551d2c7441f1b91c95e77f3
MD5 1c91e5d2ec946bebc3f2d3c86f561ad9
SHA1 0f997064da90f57dd60497a4083eb0c9d58a6e21
SHA512 d1832b1e529a972752908b23a1cd213b0f577adb14a58bdf8b0638b648bb8a65b2bb1242dda708752c13a2072bc4c46dacbd2542ec68786e90c12fd407ca497f
SSDEEP 6144:3f+BLtABPDOpJTNN6eTSUdZ/pOlYeJqlA1D0Sjk:ypYSSUdZ/olYet1D9k
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

discordurls 44caliber

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/947555841488347216/rMsrx_TAUpM8FA4yu065H2_WTcmcn84Cqs68brvjiT1JHJoQXfI7iKRbZfQV6tuF0SbO

Signatures

44caliber family
44caliber

Detected executables Discord URL observed in first stage droppers 1 IoCs

DISCORD URLS.

discordurls

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_DiscordURL

File Explorer

MIDNIGHT FREE.exe

.exe 274KB

MIDNIGHT FREE.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 00050076a05669ce423524fae8c5d6cd1ee3aa837551d2c7441f1b91c95e77f3
MD5 1c91e5d2ec946bebc3f2d3c86f561ad9
SHA1 0f997064da90f57dd60497a4083eb0c9d58a6e21
SHA512 d1832b1e529a972752908b23a1cd213b0f577adb14a58bdf8b0638b648bb8a65b2bb1242dda708752c13a2072bc4c46dacbd2542ec68786e90c12fd407ca497f
SSDEEP 6144:3f+BLtABPDOpJTNN6eTSUdZ/pOlYeJqlA1D0Sjk:ypYSSUdZ/olYet1D9k
MD5 SHA1 SHA512 SSDEEP

windows x86

Detected executables Discord URL observed in first stage droppers

DISCORD URLS.

discordurls

Minor OS version

Major OS version

Entry point

276770

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing