General
-
Target
92d0c62a52697171974ccbfff4efafe8285a617d6463cac3e78ec941cc8060cd
-
Size
274KB
-
Sample
220930-wd693sfccl
-
MD5
c900c17cffaac82449099c52e1b2f073
-
SHA1
06744242dfc6d1d080c65c3e294c2d5f07935638
-
SHA256
92d0c62a52697171974ccbfff4efafe8285a617d6463cac3e78ec941cc8060cd
-
SHA512
d525dd143b01015d1c1f6c69193dd7d6f5e72c910c13ea002ee401bf6c65447c2b4e47caf948dcb477eaee643bcb9f2247aa9422f928d287ae5d47b5120b8b56
-
SSDEEP
6144:qf+BLtABPDFLjN9eUGWP3J+rx3b/DHHIX+h41V6GIeyX6RA1D0Ka5:8N8UGWP3Jsb/DHHIgY69eyXf1Do5
Behavioral task
behavioral1
Sample
92d0c62a52697171974ccbfff4efafe8285a617d6463cac3e78ec941cc8060cd.exe
Resource
win7-20220812-en
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/839000917927919637/lZDPbQWPECLvaoegkMT0FQLz19zI5bdWBVapDdtFn-4y7ZeP03BGKkwY1jCKD2h-AwEX
Targets
-
-
Target
92d0c62a52697171974ccbfff4efafe8285a617d6463cac3e78ec941cc8060cd
-
Size
274KB
-
MD5
c900c17cffaac82449099c52e1b2f073
-
SHA1
06744242dfc6d1d080c65c3e294c2d5f07935638
-
SHA256
92d0c62a52697171974ccbfff4efafe8285a617d6463cac3e78ec941cc8060cd
-
SHA512
d525dd143b01015d1c1f6c69193dd7d6f5e72c910c13ea002ee401bf6c65447c2b4e47caf948dcb477eaee643bcb9f2247aa9422f928d287ae5d47b5120b8b56
-
SSDEEP
6144:qf+BLtABPDFLjN9eUGWP3J+rx3b/DHHIX+h41V6GIeyX6RA1D0Ka5:8N8UGWP3Jsb/DHHIgY69eyXf1Do5
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-