General
-
Target
Yandex.bin
-
Size
274KB
-
Sample
230923-xexygahf81
-
MD5
40e3881d6c0898f6a5c24940b54a69a2
-
SHA1
f3da392ee4fb703255eff7ee8a83f23c2bb02987
-
SHA256
d5c05da57fa20048e35e6ef498b3dd0bcb92eaea3997e8a7009b38b8a15c4e86
-
SHA512
9013a696cda9be776f0a5ee66aece8716662121e69c5be056c8567eabed8fea91641e50714962438efb57da1b1ff1d4a2c3211e65be10a9e7833e647f700eb8b
-
SSDEEP
6144:ef+BLtABPDMtBBfn1Y0gIoHOQZafTy8lI1D0Cbg:1tVvgIoHO+x1DRg
Behavioral task
behavioral1
Sample
Yandex.exe
Resource
win7-20230831-en
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/1155120137612034188/cdy5wHbWmzOOyiX6nZbn5OlBuBidB8er7f1281hl7JRUP1iVFGnh9s57SwGqJtsdtgrx
Targets
-
-
Target
Yandex.bin
-
Size
274KB
-
MD5
40e3881d6c0898f6a5c24940b54a69a2
-
SHA1
f3da392ee4fb703255eff7ee8a83f23c2bb02987
-
SHA256
d5c05da57fa20048e35e6ef498b3dd0bcb92eaea3997e8a7009b38b8a15c4e86
-
SHA512
9013a696cda9be776f0a5ee66aece8716662121e69c5be056c8567eabed8fea91641e50714962438efb57da1b1ff1d4a2c3211e65be10a9e7833e647f700eb8b
-
SSDEEP
6144:ef+BLtABPDMtBBfn1Y0gIoHOQZafTy8lI1D0Cbg:1tVvgIoHO+x1DRg
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-