General

  • Target

    906fe0618157118c0f1eec481a47f61de2ea4fd114e0418859f4bf2fe44113af.exe

  • Size

    303KB

  • Sample

    250224-26phmatjx6

  • MD5

    fabbae0153826c2a65fc8c4030ff0658

  • SHA1

    2a2341bf99b2978c5a4f18507a23935e06b1f1bf

  • SHA256

    906fe0618157118c0f1eec481a47f61de2ea4fd114e0418859f4bf2fe44113af

  • SHA512

    d540a918507d97ed59f13e53ed7cbe98f87bbf9fbfc26810931f771849a103683517b5fcf54aa9d3fbe1e61f2d686306079e8616adfd71be736ae078d358f81c

  • SSDEEP

    6144:jT8T6MDdbICydeBbUoGYyo51ZfpvwrmA1D0oy9t:jTq4oGYys1ZxvK1Du9t

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1339959928726749206/zR7gpRGAWJs7CmuNiEfi7k7GbCXcAzsDQ-VSd5Os1J81s8ySI7nGZ3Oh8tUO-0iIcgIC

Targets

    • Target

      906fe0618157118c0f1eec481a47f61de2ea4fd114e0418859f4bf2fe44113af.exe

    • Size

      303KB

    • MD5

      fabbae0153826c2a65fc8c4030ff0658

    • SHA1

      2a2341bf99b2978c5a4f18507a23935e06b1f1bf

    • SHA256

      906fe0618157118c0f1eec481a47f61de2ea4fd114e0418859f4bf2fe44113af

    • SHA512

      d540a918507d97ed59f13e53ed7cbe98f87bbf9fbfc26810931f771849a103683517b5fcf54aa9d3fbe1e61f2d686306079e8616adfd71be736ae078d358f81c

    • SSDEEP

      6144:jT8T6MDdbICydeBbUoGYyo51ZfpvwrmA1D0oy9t:jTq4oGYys1ZxvK1Du9t

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.