General
-
Target
gamesense loader.exe
-
Size
274KB
-
Sample
240819-n7dwmawepk
-
MD5
cfbcc27a1f00d7c734f03bb166836c8b
-
SHA1
500a3e664976fea881997381b0d9b8337adea9ee
-
SHA256
9e32f2a3e32335a0787dc706e717253486cde7902f0268f6513f84fb20ebd45b
-
SHA512
d2c5b5b60c5bd0dbcc2359e860be4ce1beec5326d181483d28ab7c71d964bb990bcca5d0592347135bad73961412cf81924687aa85305e58dc8ab0e95e9a0538
-
SSDEEP
6144:ff+BLtABPDdNF6daduZTjAHUtVU141V6GIeyXuRA1D0C1X:5NQxZTjA0tEY69eyXT1DjX
Behavioral task
behavioral1
Sample
gamesense loader.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/850434657128677426/NKtzHjpXTc8DWd5W7crWJQCaeVPSDZfP98WZ2JMx4BYhJfWt9hwb4ZsH-AtwJO41HgKu
Targets
-
-
Target
gamesense loader.exe
-
Size
274KB
-
MD5
cfbcc27a1f00d7c734f03bb166836c8b
-
SHA1
500a3e664976fea881997381b0d9b8337adea9ee
-
SHA256
9e32f2a3e32335a0787dc706e717253486cde7902f0268f6513f84fb20ebd45b
-
SHA512
d2c5b5b60c5bd0dbcc2359e860be4ce1beec5326d181483d28ab7c71d964bb990bcca5d0592347135bad73961412cf81924687aa85305e58dc8ab0e95e9a0538
-
SSDEEP
6144:ff+BLtABPDdNF6daduZTjAHUtVU141V6GIeyXuRA1D0C1X:5NQxZTjA0tEY69eyXT1DjX
Score10/10-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-