General

  • Target

    bc45b7861276839bd565daa9c370722ddaee8969.exe

  • Size

    303KB

  • Sample

    241231-rbjzjstlb1

  • MD5

    568d4673286ea9b9c70d7a68351f5071

  • SHA1

    bc45b7861276839bd565daa9c370722ddaee8969

  • SHA256

    2fe37b360b2266297431b3ca5857efd07ffdfe88630f402a75cf3c3252e03808

  • SHA512

    8d9eb7572c71bda79111b59bdd0e0fc4cec38d3bc591471269a2bf0655b13e82483d68b9fe4ff357176a36b27d7ae48361d052c0c8122e4572bef318b5acb0e1

  • SSDEEP

    6144:Y5hxT6MDdbICydeBvQ26i2dVTZy6TmA1D0y6z:Y5dY26i2vT4o1DQz

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1215365574050320435/Xs0uw6QCOgwmHxgulV8bRwClRHSPZDdcc_n9uVnaO_5U4aAeOP21GI-qx7kxwlSROYeG

Targets

    • Target

      bc45b7861276839bd565daa9c370722ddaee8969.exe

    • Size

      303KB

    • MD5

      568d4673286ea9b9c70d7a68351f5071

    • SHA1

      bc45b7861276839bd565daa9c370722ddaee8969

    • SHA256

      2fe37b360b2266297431b3ca5857efd07ffdfe88630f402a75cf3c3252e03808

    • SHA512

      8d9eb7572c71bda79111b59bdd0e0fc4cec38d3bc591471269a2bf0655b13e82483d68b9fe4ff357176a36b27d7ae48361d052c0c8122e4572bef318b5acb0e1

    • SSDEEP

      6144:Y5hxT6MDdbICydeBvQ26i2dVTZy6TmA1D0y6z:Y5dY26i2vT4o1DQz

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks