General

  • Target

    0x0007000000024246-80.dat

  • Size

    303KB

  • Sample

    250410-n6y56s1lt9

  • MD5

    c1bd28d151c9557fc0b441f864c7b3d0

  • SHA1

    330ba588d809c8908468178b548afc6ed26fb91a

  • SHA256

    a9136c89f82063ae8f594293fd8738c407eb551c00b04ff147e1e58fbdbab422

  • SHA512

    8126a8741988df068c23911eea05eb28a57222587a3f9a722aed497da89981012c7cc44ff0b51f7d9436b536b1468403ac0276b153d70ee85ec0d77d4045a1ce

  • SSDEEP

    6144:Vz2ZNT6MDdbICydeBblLIGv2A5sA2s6pmA1D0zTq:Vzi5IGv20sEC1DIq

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1324859273448128522/35NX8pTWSAG9BYKMS0plx5Cvuvs_8H5JGZj2A702Gn1FEZ64KTjaAl3gNKdJNc1eYdeY

Targets

    • Target

      0x0007000000024246-80.dat

    • Size

      303KB

    • MD5

      c1bd28d151c9557fc0b441f864c7b3d0

    • SHA1

      330ba588d809c8908468178b548afc6ed26fb91a

    • SHA256

      a9136c89f82063ae8f594293fd8738c407eb551c00b04ff147e1e58fbdbab422

    • SHA512

      8126a8741988df068c23911eea05eb28a57222587a3f9a722aed497da89981012c7cc44ff0b51f7d9436b536b1468403ac0276b153d70ee85ec0d77d4045a1ce

    • SSDEEP

      6144:Vz2ZNT6MDdbICydeBblLIGv2A5sA2s6pmA1D0zTq:Vzi5IGv20sEC1DIq

    • 44Caliber

      An open source infostealer written in C#.

    • 44Caliber family

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks