erbium | 8320993bab13f7383b8afac204edb64fe4f0b93415999d450f33b340557dfa02

Analysis

max time kernel
91s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
09/10/2022, 23:46

Target
05ee039df9e4d1df2f057e809ab9d3b1.exe
Size 7KB
Sample221009-3sab8aabe8
SHA256 8320993bab13f7383b8afac204edb64fe4f0b93415999d450f33b340557dfa02
MD5 05ee039df9e4d1df2f057e809ab9d3b1
SHA1 57c53d5dc1979d91eb282fab2ed14357a5c28ad0
SHA512 f3106f2ca759d57b40ce93d4405edb102e0cae6a4db9e7d1e54ed441b73e2d8305136121b18835cd3ca62fbe4fc5963c91eb572e904917097fcf653e24171e00
SSDEEP 96:3m2unjKp7Y5DkYoCYNiESNfWNsn8WEmO8qQuD1oCbyRTq8QHeAfstFS32hWN3QU:3Kup7iDkYDxNeNejEmO8q7xlbuTXOs3
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

erbium stealer

Family

Erbium
Erbium is an infostealer written in C++ and first seen in July 2022.
stealer erbium

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1496	4712	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\05ee039df9e4d1df2f057e809ab9d3b1.exe
"C:\Users\Admin\AppData\Local\Temp\05ee039df9e4d1df2f057e809ab9d3b1.exe"
1⤵
PID:4712
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4712 -s 872
  2⤵
  - Program crash
  PID:1496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4712 -ip 4712
1⤵
PID:4976

memory/4712-132-0x0000000005AF0000-0x0000000005DB2000-memory.dmp

Download

memory/4712-133-0x0000000005AF0000-0x0000000005DB2000-memory.dmp

Download