Behavioral task
behavioral1
Sample
SerotoninLoader.exe
Resource
win7-20231215-en
General
-
Target
SerotoninLoader.exe
-
Size
274KB
-
MD5
a1e427ad2ef7f222aa66a6256eae9470
-
SHA1
5bf1775f86b3c20387f164055322692ef1e2a508
-
SHA256
1ea45c54e59585e1cd3b415c1a8dd4e5e6146559802d55ad00549e88d0dad03c
-
SHA512
59cd96e21c224301bd9721852c4714436b7896f5cddb55c39715bdfa4b33100a7bc8d86246f2c211e365cab2f8f41acb091ed1089756d9dd24ff0bdf76e46cf7
-
SSDEEP
6144:of+BLtABPDslRpZrQWT0IQZQZtafTy8lI1D0Qkv:jlmK0IQZQNx1Dov
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/1190238303706943558/sspm8U_-iZm0lPr7lzq2HlHtwE1OvN49WbP5Wq0jsesUiJAxFQ_ILy_elOLuM4tFYIXC
Signatures
-
44caliber family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SerotoninLoader.exe
Files
-
SerotoninLoader.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ