General

  • Target

    bc187c21e71c149771bc29482b28d4c7

  • Size

    5.8MB

  • Sample

    240309-sc8vqsae25

  • MD5

    bc187c21e71c149771bc29482b28d4c7

  • SHA1

    04643be0d64c5cbca9f0f9deae0e22cf59a34119

  • SHA256

    88342eaaa9f71b1d909281db1be19a41fd725f530781068066a031d869610e7e

  • SHA512

    7737a477bce706ec231865c3d3ccae044c25948038a8ba9f93b4e50231221cbfa6e0d757908d6d3fc1cfb490a9a51fceab26bacb37321f11666efade61d7319e

  • SSDEEP

    6144:1OsE5m1O1B0Ln62oeD+ceV3DZgCtCFOzmoziZ+1p24u4Z3bF:YsZA0Nf+rxDCcnzmoziZ+1p24u4j

Malware Config

Targets

    • Target

      bc187c21e71c149771bc29482b28d4c7

    • Size

      5.8MB

    • MD5

      bc187c21e71c149771bc29482b28d4c7

    • SHA1

      04643be0d64c5cbca9f0f9deae0e22cf59a34119

    • SHA256

      88342eaaa9f71b1d909281db1be19a41fd725f530781068066a031d869610e7e

    • SHA512

      7737a477bce706ec231865c3d3ccae044c25948038a8ba9f93b4e50231221cbfa6e0d757908d6d3fc1cfb490a9a51fceab26bacb37321f11666efade61d7319e

    • SSDEEP

      6144:1OsE5m1O1B0Ln62oeD+ceV3DZgCtCFOzmoziZ+1p24u4Z3bF:YsZA0Nf+rxDCcnzmoziZ+1p24u4j

    • 44Caliber

      An open source infostealer written in C#.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks