General
-
Target
injector.rar
-
Size
113KB
-
Sample
241229-z4f3csxmb1
-
MD5
f271ac19f19b39aeb19c9441356d3c99
-
SHA1
2e96f759b2a27f6f277b400de31a75e79f13f05a
-
SHA256
3f12fdb827c8ef287d48448f20385a9f940af02aa66dbc7bdc728778b361ef1b
-
SHA512
edbe6553f8a00ad912f228753cbbb47111d642a9cd6d8738019f61258f7117fd2a61c2076287969992851fcfc47681b7905ce0a38cfbf53a691b48686cad0fa4
-
SSDEEP
3072:RFmjaKKJ+7YFxg2mad+0988X2Z+2KdJpmQkxttNaA:2joJwGd+0mpk2WpmP
Behavioral task
behavioral1
Sample
dll/BJJ.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dll/BJJ.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
dll/ICC.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
dll/ICC.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
injector.exe
Resource
win7-20241010-en
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/1322256148446838815/YnQHY515s8K_YLOO2IuKm3JUDLvMN7kX8-PDF7seyznEtOJBkt61Btpjet07f3HMDgs6
Targets
-
-
Target
dll/BJJ.dll
-
Size
40KB
-
MD5
b5bdc20676913da3ea1543cf35bd8caf
-
SHA1
c03e37fa20ca9f7d40fdfef7706367869b55621c
-
SHA256
13678c0f92b4faa6c12e670485d615cac817ef70e22e1dfada08f918269f3b50
-
SHA512
84816ccf7deb6d1ba95a24d427011d358dc9995d3d503a8d2021135175deb3fdd63fa91a90b072d44d9b89dbcdbbc5bc88b55c8367c0df1bc13c22b2b9950f19
-
SSDEEP
768:Y1O5WOC1O5WOC1O5WOC1O5WOC1O5WOC1O5WOC1O5WOC1O5WOC1O5WOC1O5WOC1Oq:YvOCvOCvOCvOCvOCvOCvOCvOCvOCvOCN
Score1/10 -
-
-
Target
dll/ICC.dll
-
Size
2KB
-
MD5
bc62792d246003a907ae0d810323c5ef
-
SHA1
d40aa132e72cdf62f700deae646999ba8867cc48
-
SHA256
7de7790a3f6369fd7e60377bae19e82f662324e5331adcab176d93c4770d63d7
-
SHA512
9990f68ddb9ba15e6de02a80bb95a23886d493af87f790ef75a723d9645e46a565a0514509149ec9afa00ae6895e88014eb54b193607e16113759ded976a45b1
Score1/10 -
-
-
Target
injector.exe
-
Size
303KB
-
MD5
48c85ca1bc5b51b14633d0d01162cba7
-
SHA1
c4c4a8b9df4cf1fd756317760b2ce5206e93fff8
-
SHA256
56e046611b9472a1a69d20580d1e0749b5363c3b3757fe61ff71a94e50d2cd8b
-
SHA512
ba5367c69ebe1732540e037974ef6c7834acc64bd5514d1fa630fce6a96fefd79d7014365bbefb5cc8ddf25891a71c9238c195e8dfc8ef6a81b98bad8a3a0506
-
SSDEEP
6144:whDT6MDdbICydeBb4eKct+ldgk6WSmA1D0Ox6:whZMeKctWdDhk1D/6
-
44Caliber family
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-