General
- Target new update.rar
- Size 6.1MB
- Sample260910-x6bvbaxvgv
- SHA256 4349729a2113fee5266374063af1c423e79a5e0988a2c0092c17dfea5040f904
Score
10/10
Malware Config
Targets
-
- Target new update/Insidious.exe
- Size 278KB
- SHA256 43d3ef07e0f83898dc59adfab88642b9b048b2a3d10b91b760331dea21b00458
Score10/10-
Family: 44Caliber
An open source infostealer written in C#.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target new update/Newtonsoft.Json.dll
- Size 704KB
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
Score1/10 -
- Target new update/System.Data.SQLite.dll
- Size 439KB
- SHA256 77dac4e1aa63161d6aff363030a801945d6b8d5b823a6b460b2c2be9ec38d3b7
Score1/10 -
- Target new update/System.Security.Cryptography.ProtectedData.dll
- Size 22KB
- SHA256 e4a756ed35c4498dcd2ed1d9166cd5cbddc48b902f15efbe6251d1d00f742b11
Score1/10 -
- Target new update/x64/SQLite.Interop.dll
- Size 1.9MB
- SHA256 1111916dc329a13bd627b2cd90c9b2263de9923fd0bb6059c69c52332f360c37
Score1/10 -
- Target new update/x86/SQLite.Interop.dll
- Size 1.5MB
- SHA256 553693b15bda4bbf7788bee09b8bd325ffe4db151686f432194c58e15b9b4f1e
Score3/10
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2