General
- Target hunter.exe
- Size 303KB
- Sample260604-vbqc4sbx5k
- SHA256 21886eab0ac88dde30d463afaa3030988619f4513d90b6565da63a1b50ad6919
- MD5 08c8cbff833172dfbf43bff217501a0e
- SHA1 437f68db703c95ecd5c7361d4924a126508429ca
- SHA512 f87f60d4d69d79c58ff9b9e9a287ca8242611293cdf79a4d4b699b78db743921768d3768c7ecbc44631c4a5daae2e4271c348cd2705769319e629fbf9a5d3d99
- SSDEEP 6144:1v1T6MDdbICydeBxbf0G3aLpbwsowrmA1D0tJ2:1vD10G3als3K1DA2
- TLSH T1EC64380817F88A65F5BE9BBDC0B551508371B462B83FDB4E1EC5A0EA2D32350CE49B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
hunter.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
44caliber
C2
-
https://discord.com/api/webhooks/1512124056479207585/qjMtA3Lg3ARNn1G9wgTjqAIQ1M2ERnOkYgRMzD_WVSgnnl1DFDZfZzmp1C_dtDPjGIGT
Targets
-
- Target hunter.exe
- Size 303KB
- SHA256 21886eab0ac88dde30d463afaa3030988619f4513d90b6565da63a1b50ad6919
- MD5 08c8cbff833172dfbf43bff217501a0e
- SHA1 437f68db703c95ecd5c7361d4924a126508429ca
- SHA512 f87f60d4d69d79c58ff9b9e9a287ca8242611293cdf79a4d4b699b78db743921768d3768c7ecbc44631c4a5daae2e4271c348cd2705769319e629fbf9a5d3d99
- SSDEEP 6144:1v1T6MDdbICydeBxbf0G3aLpbwsowrmA1D0tJ2:1vD10G3als3K1DA2
- TLSH T1EC64380817F88A65F5BE9BBDC0B551508371B462B83FDB4E1EC5A0EA2D32350CE49B67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.