General
-
Target
Insidious.exe
-
Size
303KB
-
Sample
241225-s5vtksxjfv
-
MD5
fbf3ddca500a4965c99447ea7e79cf6d
-
SHA1
582ad8da1b4b136e1ccef53200f1920b9baa24b9
-
SHA256
2809f0c07efc9d7937f9a4c3c5b9ee7e950f859717f1223d61463c1064d91fbd
-
SHA512
e0bab8e7bcdb2b7ddda0738bc352082ed2bb522fba0c9346d0a52550b1b7f80d41d9764d5603ab9a778e4e92c07d6fd0abada87abe45e8befa04ef939ad13300
-
SSDEEP
6144:g5hxT6MDdbICydeBvQ26i2dVTZ86jmA1D0mCT:g5dY26i2vTGY1D4T
Behavioral task
behavioral1
Sample
Insidious.exe
Resource
win7-20241023-en
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/1321482296741859409/X1bn2jlvTd0y9AD60L8KRwYU6M1PtlXbovFDDG4UGVxu_AKL8j8gxu-Us5mRHlfUCPOy
Targets
-
-
Target
Insidious.exe
-
Size
303KB
-
MD5
fbf3ddca500a4965c99447ea7e79cf6d
-
SHA1
582ad8da1b4b136e1ccef53200f1920b9baa24b9
-
SHA256
2809f0c07efc9d7937f9a4c3c5b9ee7e950f859717f1223d61463c1064d91fbd
-
SHA512
e0bab8e7bcdb2b7ddda0738bc352082ed2bb522fba0c9346d0a52550b1b7f80d41d9764d5603ab9a778e4e92c07d6fd0abada87abe45e8befa04ef939ad13300
-
SSDEEP
6144:g5hxT6MDdbICydeBvQ26i2dVTZ86jmA1D0mCT:g5dY26i2vTGY1D4T
-
44Caliber family
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-