Overview

overview

7

Static

static

1

Misterium.exe

windows7-x64

7

Misterium.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Misterium.exe

  • Size

    404KB

  • Sample

    230207-r5elxscc32

  • MD5

    dc9ca38a2c59288fe82cb683b60e194a

  • SHA1

    ffcb1436042ba5e9ab1f8a98e4f7c76c359d1b62

  • SHA256

    fe11868abbb864dd3821faae6b1879e6899477ebd183caaca3d06bc3c4215f93

  • SHA512

    9e62c71fddfe52e80093b084825797aae912cdf7d4acfcfd43282f1a7100857f05ce438df51c3daa23f91994d0b0256a78950f355459c44c51f971a427980195

  • SSDEEP

    6144:jhvASWtzRG4Zea5NWs1zNtbrnJrr5Hg2dzGr2c:FvZWmIea5UmNNnJrNHg29st

Score
7/10
spyware

Malware Config

Targets

    • Target

      Misterium.exe

    • Size

      404KB

    • MD5

      dc9ca38a2c59288fe82cb683b60e194a

    • SHA1

      ffcb1436042ba5e9ab1f8a98e4f7c76c359d1b62

    • SHA256

      fe11868abbb864dd3821faae6b1879e6899477ebd183caaca3d06bc3c4215f93

    • SHA512

      9e62c71fddfe52e80093b084825797aae912cdf7d4acfcfd43282f1a7100857f05ce438df51c3daa23f91994d0b0256a78950f355459c44c51f971a427980195

    • SSDEEP

      6144:jhvASWtzRG4Zea5NWs1zNtbrnJrr5Hg2dzGr2c:FvZWmIea5UmNNnJrNHg29st

    Score
    7/10
    spyware

    • Uses the VBS compiler for execution

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks