44caliber | c6bc499a80527fd29ec372ac626ae6ae27776de14ee83b15d37a97236e29465b | Triage

Sharing

General

Target

new winlocker buider lite.exe
Size

274KB
Sample

240218-lhfb2sgc9z
MD5

3e54f46726f891cbf75860b18e7c211a
SHA1

8823967efa7b979e34e8b7a0eca529eab4377f17
SHA256

c6bc499a80527fd29ec372ac626ae6ae27776de14ee83b15d37a97236e29465b
SHA512

47597edafa0fdbf54a6f850f964aa1078bb1fa1f1e82673e04af8d12d1c2c4e62f7550ff30b1207698678607cca8045c6b70d30c1ef533e7d4a72e0d044e222f
SSDEEP

6144:of+BLtABPD5lRuZrQWT0IQZQZ9qgMlI1D03wg:SlFK0IQZQXh1DHg

Score

10^/10

44caliber spyware stealer

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1137391151696072804/iUyZWW_cx_XI9ln3zsr9LCtIFqjJAXtZ1pVtqyQ0I7Ar3nKxBrgEkQqr9b1pcXmV8sA_

Targets

- Target
  
  new winlocker buider lite.exe
- Size
  
  274KB
- MD5
  
  3e54f46726f891cbf75860b18e7c211a
- SHA1
  
  8823967efa7b979e34e8b7a0eca529eab4377f17
- SHA256
  
  c6bc499a80527fd29ec372ac626ae6ae27776de14ee83b15d37a97236e29465b
- SHA512
  
  47597edafa0fdbf54a6f850f964aa1078bb1fa1f1e82673e04af8d12d1c2c4e62f7550ff30b1207698678607cca8045c6b70d30c1ef533e7d4a72e0d044e222f
- SSDEEP
  
  6144:of+BLtABPD5lRuZrQWT0IQZQZ9qgMlI1D03wg:SlFK0IQZQXh1DHg
Score

10^/10

44caliber spyware stealer
- 44Caliber
  An open source infostealer written in C#.
  stealer 44caliber
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

44caliberspywarestealer