General
- Target Insidious.exe
- Size 303KB
- Sample260310-3v33bac16j
- SHA256 22081259e5fa15e2fc6a40775de297b7ef9ecdbad3da04bb43bfbbbe07a85d61
- MD5 924d97935597ef40977697b8ba19a17d
- SHA1 61941398f327a6778269cf6bb9db5f1c1235c14c
- SHA512 5cb16883d56250e3d94e3b09f12ed47d1f95d8ca387e48f1d08811f5e0e0b49d60d18f39463120b204431e7859862397203c9bd1411004704f47e30785a536aa
- SSDEEP 6144:gFcT6MDdbICydeBvtCikGW9KJpwkmA1D0LkH:gFK1CikGeKHJ1DPH
- TLSH T1F364480827F88A65F5BE9BBEC0B551508371B462B83FDB4E1EC560EA2D32350CD49B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Insidious.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
44caliber
C2
-
https://discord.com/api/webhooks/1481075964904603660/1O1aC0KoIjtqsOdu0prEBKXPHFST_bvBYU0NAl7yIwHO0ymPnyIyZV8J4E7NBzNVDuFy
Targets
-
- Target Insidious.exe
- Size 303KB
- SHA256 22081259e5fa15e2fc6a40775de297b7ef9ecdbad3da04bb43bfbbbe07a85d61
- MD5 924d97935597ef40977697b8ba19a17d
- SHA1 61941398f327a6778269cf6bb9db5f1c1235c14c
- SHA512 5cb16883d56250e3d94e3b09f12ed47d1f95d8ca387e48f1d08811f5e0e0b49d60d18f39463120b204431e7859862397203c9bd1411004704f47e30785a536aa
- SSDEEP 6144:gFcT6MDdbICydeBvtCikGW9KJpwkmA1D0LkH:gFK1CikGeKHJ1DPH
- TLSH T1F364480827F88A65F5BE9BBEC0B551508371B462B83FDB4E1EC560EA2D32350CD49B67
- MD5 SHA1 SHA512 SSDEEP TLSH
44Caliber family
Accesses cryptocurrency files/wallets, possible credential harvesting
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.