Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Insidious.exe

  • Size

    303KB

  • Sample

    250304-r4ewastls4

  • MD5

    7c71b3abefc0cd9e6852c577e466d905

  • SHA1

    1e2777765eb8340b0f9eefaa36b213634806d20c

  • SHA256

    686ef70e6f83b17792aac10f5853cd728d1647be6c57cfae1331602df69b211f

  • SHA512

    8f3a8f7142a73aacca46b930cf11b21efa0f8433480cb3e95d560a1a96f958413f00a2e8b05d7749656e50c6aa31e6da815434b0f703541821f42529b9a41114

  • SSDEEP

    6144:0b4T6MDdbICydeBrdcQG3yf51+/wjmA1D0113:0bGhcQG3yB1aK1DY3

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1346493084548075560/YEckkrmFm7scerU_vEBzkRjSlTmaNinaKTCIOFAolLHyb8EgBC4MRQBOOkH10nX3NlHv

Targets

    • Target

      Insidious.exe

    • Size

      303KB

    • MD5

      7c71b3abefc0cd9e6852c577e466d905

    • SHA1

      1e2777765eb8340b0f9eefaa36b213634806d20c

    • SHA256

      686ef70e6f83b17792aac10f5853cd728d1647be6c57cfae1331602df69b211f

    • SHA512

      8f3a8f7142a73aacca46b930cf11b21efa0f8433480cb3e95d560a1a96f958413f00a2e8b05d7749656e50c6aa31e6da815434b0f703541821f42529b9a41114

    • SSDEEP

      6144:0b4T6MDdbICydeBrdcQG3yf51+/wjmA1D0113:0bGhcQG3yB1aK1DY3

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks