General
-
Target
Cure it.exe
-
Size
274KB
-
Sample
220628-prwbeahdfm
-
MD5
5ecc971a3066d188f82bc280460077f2
-
SHA1
dbf724a60984c51a24415ee98e5bd6c02833e6df
-
SHA256
a6aec29df33fa5727725350ea4c4dd657f5e37ece79a4fb3b1d2be57c1d81a70
-
SHA512
f13afcde48ce32fdb3ecdffc34c99b1eaf76cbed5e89851f5348ccb8fe5b0f42549c02beec5c3762685cdfa1dc58f0a496ca832e9a1b1267c64aa6aae7bb2a51
Static task
static1
Behavioral task
behavioral1
Sample
Cure it.exe
Resource
win7-20220414-en
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/990283827702292511/sw8VFLdWFAHNTHyLosotLJ4YrDPHR6pzyxMuMtWw_MEAq1Eou6DlZsjolVKhcg94MazC
Targets
-
-
Target
Cure it.exe
-
Size
274KB
-
MD5
5ecc971a3066d188f82bc280460077f2
-
SHA1
dbf724a60984c51a24415ee98e5bd6c02833e6df
-
SHA256
a6aec29df33fa5727725350ea4c4dd657f5e37ece79a4fb3b1d2be57c1d81a70
-
SHA512
f13afcde48ce32fdb3ecdffc34c99b1eaf76cbed5e89851f5348ccb8fe5b0f42549c02beec5c3762685cdfa1dc58f0a496ca832e9a1b1267c64aa6aae7bb2a51
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-