General

  • Target

    2d936a38e8c1094b42769f128030b1dc3c110c7a5abb8fa1ac3842a76dba7b33.exe

  • Size

    606KB

  • Sample

    241120-3tsj7awbmc

  • MD5

    59123841ec7ab6b96cce25007768d602

  • SHA1

    97d9974813a885ce0427e95a821aec36308534fd

  • SHA256

    2d936a38e8c1094b42769f128030b1dc3c110c7a5abb8fa1ac3842a76dba7b33

  • SHA512

    959504d40a506f9c7a3aff0d00116f5e6c690be51d7deda85ce45917c1b5c91cb4ec59e257bd2fa66b518f2c291ce9dc2217c49b2925008b1bb2cc4d4abccfbc

  • SSDEEP

    12288:QZo9wqaX9lAytIcWlkhfMZVJt3uITOI7RxKPgcMQolSIBxzQQUpCW31R:ZaX9lAytIclhEJkIT7igcNjIB5Qgw

Malware Config

Targets

    • Target

      2d936a38e8c1094b42769f128030b1dc3c110c7a5abb8fa1ac3842a76dba7b33.exe

    • Size

      606KB

    • MD5

      59123841ec7ab6b96cce25007768d602

    • SHA1

      97d9974813a885ce0427e95a821aec36308534fd

    • SHA256

      2d936a38e8c1094b42769f128030b1dc3c110c7a5abb8fa1ac3842a76dba7b33

    • SHA512

      959504d40a506f9c7a3aff0d00116f5e6c690be51d7deda85ce45917c1b5c91cb4ec59e257bd2fa66b518f2c291ce9dc2217c49b2925008b1bb2cc4d4abccfbc

    • SSDEEP

      12288:QZo9wqaX9lAytIcWlkhfMZVJt3uITOI7RxKPgcMQolSIBxzQQUpCW31R:ZaX9lAytIclhEJkIT7igcNjIB5Qgw

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks