Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    906fe0618157118c0f1eec481a47f61de2ea4fd114e0418859f4bf2fe44113af.exe

  • Size

    303KB

  • Sample

    250224-23bscssqz3

  • MD5

    fabbae0153826c2a65fc8c4030ff0658

  • SHA1

    2a2341bf99b2978c5a4f18507a23935e06b1f1bf

  • SHA256

    906fe0618157118c0f1eec481a47f61de2ea4fd114e0418859f4bf2fe44113af

  • SHA512

    d540a918507d97ed59f13e53ed7cbe98f87bbf9fbfc26810931f771849a103683517b5fcf54aa9d3fbe1e61f2d686306079e8616adfd71be736ae078d358f81c

  • SSDEEP

    6144:jT8T6MDdbICydeBbUoGYyo51ZfpvwrmA1D0oy9t:jTq4oGYys1ZxvK1Du9t

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1339959928726749206/zR7gpRGAWJs7CmuNiEfi7k7GbCXcAzsDQ-VSd5Os1J81s8ySI7nGZ3Oh8tUO-0iIcgIC

Targets

    • Target

      906fe0618157118c0f1eec481a47f61de2ea4fd114e0418859f4bf2fe44113af.exe

    • Size

      303KB

    • MD5

      fabbae0153826c2a65fc8c4030ff0658

    • SHA1

      2a2341bf99b2978c5a4f18507a23935e06b1f1bf

    • SHA256

      906fe0618157118c0f1eec481a47f61de2ea4fd114e0418859f4bf2fe44113af

    • SHA512

      d540a918507d97ed59f13e53ed7cbe98f87bbf9fbfc26810931f771849a103683517b5fcf54aa9d3fbe1e61f2d686306079e8616adfd71be736ae078d358f81c

    • SSDEEP

      6144:jT8T6MDdbICydeBbUoGYyo51ZfpvwrmA1D0oy9t:jTq4oGYys1ZxvK1Du9t

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks