44caliber | Cure it[.]exe

General

Target
Cure it.exe
Size 274KB
Sample220628-prwbeahdfm
SHA256 a6aec29df33fa5727725350ea4c4dd657f5e37ece79a4fb3b1d2be57c1d81a70
MD5 5ecc971a3066d188f82bc280460077f2
SHA1 dbf724a60984c51a24415ee98e5bd6c02833e6df
SHA512 f13afcde48ce32fdb3ecdffc34c99b1eaf76cbed5e89851f5348ccb8fe5b0f42549c02beec5c3762685cdfa1dc58f0a496ca832e9a1b1267c64aa6aae7bb2a51
SSDEEP 6144:/f+BLtABPDOZJc9VjFe6UlwYLWlYeJ6lA1D0ub/:KZqA6UlwYilYed1Dp/
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

44caliber

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/990283827702292511/sw8VFLdWFAHNTHyLosotLJ4YrDPHR6pzyxMuMtWw_MEAq1Eou6DlZsjolVKhcg94MazC

Signatures

44caliber family
44caliber

File Explorer

Cure it.exe

.exe 274KB

Cure it.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a6aec29df33fa5727725350ea4c4dd657f5e37ece79a4fb3b1d2be57c1d81a70
MD5 5ecc971a3066d188f82bc280460077f2
SHA1 dbf724a60984c51a24415ee98e5bd6c02833e6df
SHA512 f13afcde48ce32fdb3ecdffc34c99b1eaf76cbed5e89851f5348ccb8fe5b0f42549c02beec5c3762685cdfa1dc58f0a496ca832e9a1b1267c64aa6aae7bb2a51
SSDEEP 6144:/f+BLtABPDOZJc9VjFe6UlwYLWlYeJ6lA1D0ub/:KZqA6UlwYilYed1Dp/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

276786

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing