Overview

overview

10

Static

static

10

Insidious.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Insidious.exe

  • Size

    303KB

  • Sample

    240315-z5gqaabe31

  • MD5

    1fde4c0ddc141022ae31beadbae65aca

  • SHA1

    ad4767a9905590f29e588fde1cd19a124fa42ef4

  • SHA256

    59a6f06a6c3fb38fea0456447ef4b2be6c32b66c5eee189df4dcd07b7802cfb6

  • SHA512

    b1a8bbc8a876355a6f04b1e40112f1ec1931f3d6bbab7036f87d8661b025310cd854dd789ca19fe8052d003c234ba607f3d5e27581e333b160ad2a833a1d30f1

  • SSDEEP

    6144:bb2T6MDdbICydeB4mAQG0yB5cqVsvurTbmI1D0rAC:bb8HAQG0yXcsTR1DVC

Score
10/10
44caliberspywarestealer

Malware Config

Extracted

Family

44caliber

C2

https://discordapp.com/api/webhooks/1218245532355395716/g11t27knevSG81QEKAU9x-8eGlSzRRXTzD3cakygbS3BZNqW4JAN5zponvMiNKqlhNYv

Targets

    • Target

      Insidious.exe

    • Size

      303KB

    • MD5

      1fde4c0ddc141022ae31beadbae65aca

    • SHA1

      ad4767a9905590f29e588fde1cd19a124fa42ef4

    • SHA256

      59a6f06a6c3fb38fea0456447ef4b2be6c32b66c5eee189df4dcd07b7802cfb6

    • SHA512

      b1a8bbc8a876355a6f04b1e40112f1ec1931f3d6bbab7036f87d8661b025310cd854dd789ca19fe8052d003c234ba607f3d5e27581e333b160ad2a833a1d30f1

    • SSDEEP

      6144:bb2T6MDdbICydeB4mAQG0yB5cqVsvurTbmI1D0rAC:bb8HAQG0yXcsTR1DVC

    Score
    10/10
    44caliberspywarestealer

    • 44Caliber

      An open source infostealer written in C#.

      stealer44caliber

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

2
T1552

Credentials In Files

2
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks