Static task
static1
Behavioral task
behavioral1
Sample
Insidious.exe
Resource
win7-20220414-en
General
-
Target
Insidious.bin
-
Size
274KB
-
MD5
2a045edff73b33791ebcb7077725b650
-
SHA1
15dfbffb6876a0f78f925f3bd407352af7c0b070
-
SHA256
47c42c1aa79425aa022efc0650e8465185b1d2694d21898f287eae5efed5ce15
-
SHA512
398eef4effcb8abf821f82966e98c2790b8c0ea76c5f419e739fa6fbd52885ebff1de77da22eeb23b758b3e5219cbff317667d2a555a0cf9f1cba3f633794bde
-
SSDEEP
6144:Uf+BLtABPDlgj1xw1eO5rbEMzpgUsY3hiGUClYeJSlA1D0MPi:Z161eO5rbrHsY3hiG7lYel1D/i
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/993771742373892207/G2243YWyGbuATWA0961Hf1DMkEC_PyBy0ABLMu4YRxsTN5o8A1jVzAeRnglWOJNXEd8n
Signatures
-
44caliber family
Files
-
Insidious.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ