Overview

overview

10

Static

static

10

d718569806...ed.exe

windows7-x64

10

d718569806...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d718569806fe1b65f1e72b3b87637ded

  • Size

    281KB

  • Sample

    240319-zq86zsfd93

  • MD5

    d718569806fe1b65f1e72b3b87637ded

  • SHA1

    0ec5edb3bd1af1e1a1cfefcf89514a44040c1e31

  • SHA256

    73572897111428c2c2d7a42f6574f652899614daed49f2595459f5934b175070

  • SHA512

    61563c86312f4c29a30790e88f74edf8d0a8e2519ea0071ce2ec7edb4a94e6d03379c56c8c635e5a05eb1a502d4fd6add85132212a5b7b46964e6cdbf9382887

  • SSDEEP

    3072:xdHMsG7wduBTa5NhUPrJcnqpsXV/02cQvUrx/bbgaOEOob46tYZIkSiJOGK3hI/e:bQwduBm5Nh3CQOxTbgaOEOobPYZTG

Score
10/10
44caliberspywarestealer

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/881934732508688396/6pOOd13n8prLOavmJLgINtRCm2-J0Y0r1y0DyEQI5pU0zoH0JVjM2CNBZ0kPytGFp5hw

Targets

    • Target

      d718569806fe1b65f1e72b3b87637ded

    • Size

      281KB

    • MD5

      d718569806fe1b65f1e72b3b87637ded

    • SHA1

      0ec5edb3bd1af1e1a1cfefcf89514a44040c1e31

    • SHA256

      73572897111428c2c2d7a42f6574f652899614daed49f2595459f5934b175070

    • SHA512

      61563c86312f4c29a30790e88f74edf8d0a8e2519ea0071ce2ec7edb4a94e6d03379c56c8c635e5a05eb1a502d4fd6add85132212a5b7b46964e6cdbf9382887

    • SSDEEP

      3072:xdHMsG7wduBTa5NhUPrJcnqpsXV/02cQvUrx/bbgaOEOob46tYZIkSiJOGK3hI/e:bQwduBm5Nh3CQOxTbgaOEOobPYZTG

    Score
    10/10
    44caliberspywarestealer

    • 44Caliber

      An open source infostealer written in C#.

      stealer44caliber

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

2
T1552

Credentials In Files

2
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks