General
- Target Fatality-Crack.exe
- Size 303KB
- Sample260822-rfqynazvay
- SHA256 42771c34d1bec4bfdbcae83d8d0a1babf4661d7ee83084661458a5f4cb0aada2
- MD5 4eabb9ab4e2ea9ccf4f7562df2a6fd9e
- SHA1 c335cb4890622c2b7924d9acf7d58107edb03907
- SHA512 2b3e16bafe9a0fa1e2e9f0e138ff1f132ab4e6d1cb959ee2e62e763f49bfdee1e185a8904a924d470b47a124ee82390ad518823586163ca0586ce783f8893796
- SSDEEP 6144:IRlT6MDdbICydeBV9suqPmlF62wwvmA1D0CV4:IRT4uqPmH6pW1Df4
- TLSH T10764380817F88A65F5BE9BBDC0B551608371B462B83FDB4E1EC560EA2D32350CE49B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
44caliber
C2
-
https://discord.com/api/webhooks/1490733257312960634/09ICdzNVjklPcJOL5sKxN4b8dI9OEKTYqy-LBOyOginoXWIYj04otD_mCnQf90aIkmp4
Targets
-
- Target Fatality-Crack.exe
- Size 303KB
- SHA256 42771c34d1bec4bfdbcae83d8d0a1babf4661d7ee83084661458a5f4cb0aada2
- MD5 4eabb9ab4e2ea9ccf4f7562df2a6fd9e
- SHA1 c335cb4890622c2b7924d9acf7d58107edb03907
- SHA512 2b3e16bafe9a0fa1e2e9f0e138ff1f132ab4e6d1cb959ee2e62e763f49bfdee1e185a8904a924d470b47a124ee82390ad518823586163ca0586ce783f8893796
- SSDEEP 6144:IRlT6MDdbICydeBV9suqPmlF62wwvmA1D0CV4:IRT4uqPmH6pW1Df4
- TLSH T10764380817F88A65F5BE9BBDC0B551608371B462B83FDB4E1EC560EA2D32350CE49B67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.