General
-
Target
Softcoreinstall.exe
-
Size
274KB
-
Sample
240309-wkkpnaeg2y
-
MD5
6d36919d059547c600e70d251864b691
-
SHA1
5571a82c4fb5274e5d858448e51fca045c89c01c
-
SHA256
cea25234ff6e1e950f760167de3dc0df47c921914cd81cb340d0d9af1ecf9b4c
-
SHA512
c329d8929216e2f8c500c26d310c4b137385dd8e24d214feffcac79ac9e8e008f8c0909f83d80e27a76f8b4c0710b566e3dc4489172aa125cbf876ae659eaab9
-
SSDEEP
6144:mf+BLtABPDFcYumU1SZedpXyEq11afTy4lI1D0hVw:kcNS0dpXyEqJF1Dow
Behavioral task
behavioral1
Sample
Softcoreinstall.exe
Resource
win7-20231129-en
Malware Config
Extracted
44caliber
https://discordapp.com/api/webhooks/1215016857619275786/muCuwo2orfQ-J7FphyDUzXj-bBoSq2lVyekxXRaivuh5cbtqNobITDwhhjVdafZFaU9y
Targets
-
-
Target
Softcoreinstall.exe
-
Size
274KB
-
MD5
6d36919d059547c600e70d251864b691
-
SHA1
5571a82c4fb5274e5d858448e51fca045c89c01c
-
SHA256
cea25234ff6e1e950f760167de3dc0df47c921914cd81cb340d0d9af1ecf9b4c
-
SHA512
c329d8929216e2f8c500c26d310c4b137385dd8e24d214feffcac79ac9e8e008f8c0909f83d80e27a76f8b4c0710b566e3dc4489172aa125cbf876ae659eaab9
-
SSDEEP
6144:mf+BLtABPDFcYumU1SZedpXyEq11afTy4lI1D0hVw:kcNS0dpXyEqJF1Dow
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-