44caliber | f920013efc8d6839e9ff3a2ce43010e1fb46a941a95f99b8c39335d1fbb1bc29 | Triage

Submit
Reports

Overview

overview

Static

static

7

4e66b44231...6e.exe

windows7-x64

4e66b44231...6e.exe

windows10-2004-x64

Sharing

General

Target

4e66b442315b528793daf29f272beb6e.exe
Size

13.2MB
Sample

240109-xcbmfshbd4
MD5

4e66b442315b528793daf29f272beb6e
SHA1

5085c7f9d376063e9544fc9fe6c94a3567fae67d
SHA256

f920013efc8d6839e9ff3a2ce43010e1fb46a941a95f99b8c39335d1fbb1bc29
SHA512

5165565ebc68a408842cf6ea6bf14d60172d2f4fc2c684d16235db2368ae12f53277580fc2103eda1fc102bc68e8742882ab78e74b31ee686bd3c3c5941d89e1
SSDEEP

393216:CWeWk6XZcIgBBQFOnQ+NZrqCkbEp+DNjyymL8AV:Cz6J7gP8OnQctRQg+hyyW

Score

10^/10

44caliber stealer themida upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

4e66b442315b528793daf29f272beb6e.exe

Resource

win7-20231215-en

44caliber stealer themida upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

4e66b442315b528793daf29f272beb6e.exe

Resource

win10v2004-20231215-en

44caliber stealer themida upx

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/864993390039138344/KcIraJ14D-c_gxt8b62QhfVu_PGaoIgxX5A9WLR2Iw9WLUoF8VGIsnRR969mXFvP0Unf

Targets

- Target
  
  4e66b442315b528793daf29f272beb6e.exe
- Size
  
  13.2MB
- MD5
  
  4e66b442315b528793daf29f272beb6e
- SHA1
  
  5085c7f9d376063e9544fc9fe6c94a3567fae67d
- SHA256
  
  f920013efc8d6839e9ff3a2ce43010e1fb46a941a95f99b8c39335d1fbb1bc29
- SHA512
  
  5165565ebc68a408842cf6ea6bf14d60172d2f4fc2c684d16235db2368ae12f53277580fc2103eda1fc102bc68e8742882ab78e74b31ee686bd3c3c5941d89e1
- SSDEEP
  
  393216:CWeWk6XZcIgBBQFOnQ+NZrqCkbEp+DNjyymL8AV:Cz6J7gP8OnQctRQg+hyyW
Score

10^/10

44caliber stealer themida upx
- 44Caliber
  An open source infostealer written in C#.
  stealer 44caliber
- Executes dropped EXE
- Loads dropped DLL
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

44caliberstealerthemidaupx

behavioral2

44caliberstealerthemidaupx

© 2018-2024

Terms | Privacy