Overview

overview

10

Static

static

WH.exe

windows7-x64

10

WH.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WH.exe

  • Size

    273KB

  • Sample

    220822-d4bxradba2

  • MD5

    4a15c27773db7b3ac91a2be1de895173

  • SHA1

    625bde1fd654a29fe75bdbd9a49b438e084e927f

  • SHA256

    f7e074da1593f80a7c94216e70de0f6c3f68cddfa8a61f6e5680e7ce587f50fe

  • SHA512

    f08cb5a2f3c802bd3652e86dfe992df67eea393f989d3ac3f0a2bf0b1d08111bc1cec50eff0e980227697bae608929ff0d39ca92cc2d9ebe7d6f3bc5ba47d8d8

  • SSDEEP

    6144:6f+BLtABPDmZBb4NB3dX2MYB/OBh9XdelABD0J2h:PZit2MYB/mhjBDth

Score
10/10
44caliberspywarestealer

Malware Config

Targets

    • Target

      WH.exe

    • Size

      273KB

    • MD5

      4a15c27773db7b3ac91a2be1de895173

    • SHA1

      625bde1fd654a29fe75bdbd9a49b438e084e927f

    • SHA256

      f7e074da1593f80a7c94216e70de0f6c3f68cddfa8a61f6e5680e7ce587f50fe

    • SHA512

      f08cb5a2f3c802bd3652e86dfe992df67eea393f989d3ac3f0a2bf0b1d08111bc1cec50eff0e980227697bae608929ff0d39ca92cc2d9ebe7d6f3bc5ba47d8d8

    • SSDEEP

      6144:6f+BLtABPDmZBb4NB3dX2MYB/OBh9XdelABD0J2h:PZit2MYB/mhjBDth

    Score
    10/10
    44caliberspywarestealer

    • 44Caliber

      An open source infostealer written in C#.

      stealer44caliber

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks