44caliber | f7e074da1593f80a7c94216e70de0f6c3f68cddfa8a61f6e5680e7ce587f50fe | Triage

Sharing

General

Target

WH.exe
Size

273KB
Sample

220822-d4bxradba2
MD5

4a15c27773db7b3ac91a2be1de895173
SHA1

625bde1fd654a29fe75bdbd9a49b438e084e927f
SHA256

f7e074da1593f80a7c94216e70de0f6c3f68cddfa8a61f6e5680e7ce587f50fe
SHA512

f08cb5a2f3c802bd3652e86dfe992df67eea393f989d3ac3f0a2bf0b1d08111bc1cec50eff0e980227697bae608929ff0d39ca92cc2d9ebe7d6f3bc5ba47d8d8
SSDEEP

6144:6f+BLtABPDmZBb4NB3dX2MYB/OBh9XdelABD0J2h:PZit2MYB/mhjBDth

Score

10^/10

44caliber spyware stealer

Malware Config

Targets

- Target
  
  WH.exe
- Size
  
  273KB
- MD5
  
  4a15c27773db7b3ac91a2be1de895173
- SHA1
  
  625bde1fd654a29fe75bdbd9a49b438e084e927f
- SHA256
  
  f7e074da1593f80a7c94216e70de0f6c3f68cddfa8a61f6e5680e7ce587f50fe
- SHA512
  
  f08cb5a2f3c802bd3652e86dfe992df67eea393f989d3ac3f0a2bf0b1d08111bc1cec50eff0e980227697bae608929ff0d39ca92cc2d9ebe7d6f3bc5ba47d8d8
- SSDEEP
  
  6144:6f+BLtABPDmZBb4NB3dX2MYB/OBh9XdelABD0J2h:PZit2MYB/mhjBDth
Score

10^/10

44caliber spyware stealer
- 44Caliber
  An open source infostealer written in C#.
  stealer 44caliber
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

44caliberspywarestealer

behavioral2

44caliberspywarestealer