General

  • Target

    EacBypass.bin

  • Size

    269KB

  • Sample

    220619-qf3f1shbb7

  • MD5

    5b4cbde6076f9949d6e4c79242f24bcc

  • SHA1

    0e3abddc73f19f50e6dffac9caca7064756a9f87

  • SHA256

    666a170ec33fd742b767a7bc0888efc8fd23e962e82beb3e030cf53a3678070f

  • SHA512

    1d9840a3245faf604180038136b932f361607d2d66b6c21db150de38f181d54aa55c4ca0c7d882e1987423fa884abb40aae336c48cda5380bc85f078ccbbcdbb

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/988064863639179354/rk8qEk54dRaPv2X0cXi3oLm4JRvN01pwbpb0Tmb9-P80-qFjTVw3QcpWSQrITZWKSVve

Targets

    • Target

      EacBypass.bin

    • Size

      269KB

    • MD5

      5b4cbde6076f9949d6e4c79242f24bcc

    • SHA1

      0e3abddc73f19f50e6dffac9caca7064756a9f87

    • SHA256

      666a170ec33fd742b767a7bc0888efc8fd23e962e82beb3e030cf53a3678070f

    • SHA512

      1d9840a3245faf604180038136b932f361607d2d66b6c21db150de38f181d54aa55c4ca0c7d882e1987423fa884abb40aae336c48cda5380bc85f078ccbbcdbb

    • 44Caliber

      An open source infostealer written in C#.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks