Overview

overview

10

Static

static

10

62842fba1b...99.exe

windows7-x64

10

62842fba1b...99.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62842fba1bad0f14497d674dcc2ce5b74c6dc781b56d9be7b22abc0e6e84e299

  • Size

    274KB

  • Sample

    221017-ykbsvsdbam

  • MD5

    88c05e490c59382d1d19886fe0fff325

  • SHA1

    e9cf39409ef4569c21cc10b2fd4f040e19b6a4ee

  • SHA256

    62842fba1bad0f14497d674dcc2ce5b74c6dc781b56d9be7b22abc0e6e84e299

  • SHA512

    7b4511fe6c98627dc57ac2fdb32083a38f290542bcbe08bd8ca566def4bf61e4e02db1e46d525ce946f0caf55fb9e0f1e43d09129e4992bb9bc1b3b39cf6e052

  • SSDEEP

    6144:af+BLtABPDWlR1ZroWT0Ilb5wqlYeJOlA1D0LfN:rluK0Ilb5/lYeR1D+N

Score
10/10
44caliberspywarestealer

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/995248566551453789/dAKoCwfwxZLio1kYw1hDPwWmGXZm_oc0bPueRJeTs24o8dr_hgZncoNldxhaZ5_em0Ve

Targets

    • Target

      62842fba1bad0f14497d674dcc2ce5b74c6dc781b56d9be7b22abc0e6e84e299

    • Size

      274KB

    • MD5

      88c05e490c59382d1d19886fe0fff325

    • SHA1

      e9cf39409ef4569c21cc10b2fd4f040e19b6a4ee

    • SHA256

      62842fba1bad0f14497d674dcc2ce5b74c6dc781b56d9be7b22abc0e6e84e299

    • SHA512

      7b4511fe6c98627dc57ac2fdb32083a38f290542bcbe08bd8ca566def4bf61e4e02db1e46d525ce946f0caf55fb9e0f1e43d09129e4992bb9bc1b3b39cf6e052

    • SSDEEP

      6144:af+BLtABPDWlR1ZroWT0Ilb5wqlYeJOlA1D0LfN:rluK0Ilb5/lYeR1D+N

    Score
    10/10
    44caliberspywarestealer

    • 44Caliber

      An open source infostealer written in C#.

      stealer44caliber

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Tasks