Extracted

• • Target

    Insidious.exe

  • Size

    303KB

  • MD5

    7505682a058f45df956a6cdaa930af95

  • SHA1

    dcf5b4a3de803af8361c85067605bd71d40035ba

  • SHA256

    fe71bbfb6ea7f2373565eaccf6dc11ad16bf1f067da9bd22424e380fc14ff990

  • SHA512

    c4f9b38610ed8a0503d2aa55ce4241537c75ee88b72abda1b3a87c911419c71cbe2a84a203c7624e24a453b1f975937c2360d7136535298499db778402c599d0

  • SSDEEP

    6144:tRlT6MDdbICydeBV9suqPmlF62y6jmA1D0jCc:tRT4uqPmH6DY1DJc

  Score

  10^/10

  44caliberspywarestealerdiscovery

  • 44Caliber

    An open source infostealer written in C#.

    stealer44caliber

  • 44Caliber family

    44caliber

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in System32 directory

  behavioral1behavioral2