General

  • Target

    Insidious.exe

  • Size

    303KB

  • Sample

    241010-qx416syalh

  • MD5

    665322163467881c0f67acdd516636ee

  • SHA1

    f2aa4a06034ebb1a59682bcb793a57e9d32ab6f8

  • SHA256

    e155fc44d621963f11e29a3a0441720e5182930d40291f9702fff148894426f5

  • SHA512

    0bf5af0d13e1f52ac76b30209031c7457cac393c8f67dfd17c25b264b5d4ace82c4f48378d06de06b388d53ed063d700640b803dae62735a3c887973491d097f

  • SSDEEP

    6144:oHhT6MDdbICydeBbWRIMmwKtptoF6vur0mI1D0RgQ:oHPJMmwKbtoji1DfQ

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1209526085927051385/EtvkHonNgrd7_Ed8XhPqpGby3BdFMb-sGGbiEy1W1YNXV_phazAD5tPhlHZHRXpX8qqv

Targets

    • Target

      Insidious.exe

    • Size

      303KB

    • MD5

      665322163467881c0f67acdd516636ee

    • SHA1

      f2aa4a06034ebb1a59682bcb793a57e9d32ab6f8

    • SHA256

      e155fc44d621963f11e29a3a0441720e5182930d40291f9702fff148894426f5

    • SHA512

      0bf5af0d13e1f52ac76b30209031c7457cac393c8f67dfd17c25b264b5d4ace82c4f48378d06de06b388d53ed063d700640b803dae62735a3c887973491d097f

    • SSDEEP

      6144:oHhT6MDdbICydeBbWRIMmwKtptoF6vur0mI1D0RgQ:oHPJMmwKbtoji1DfQ

    • 44Caliber

      An open source infostealer written in C#.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks