stealerium | 432-63-0x0000000000400000-0x0000000000584000-memory[.]dmp

General

Target
432-63-0x0000000000400000-0x0000000000584000-memory.dmp
Size 1.5MB
Sample230404-sdggwafg57
SHA256 ffe75146178fe683bc26fd415ddf825db4ca3c56e58fbed6342b35c6d192cb60
MD5 e461b7ae00f42947e1ab8338ad836df4
SHA1 2799cbdff03466056723de529106160d7ba64667
SHA512 2591809f60b1600335fd0ac65e3392773b1f13c9e6961b581c2b3ac5d3434ccb369f02bcea009dfff36e1133d851da8587378b46d19ef57d8990bfba1698b803
SSDEEP 24576:klAi2Q9NXw2/wPOjdGxYqfw+Jwz/S/6RZs8nVW6k5JHkARt7DBAqn:c/Tq24GjdGSgw+W7SCRnVQTEQ/BA8
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

stealerium

Malware Config

Extracted

Family

stealerium

C2

https://discordapp.com/api/webhooks/1084783843615178843/A31fRI9RQZDNhL7oP-ww16uxWJlo3rtBHf98vuiK0BCkVC5USg4IAuKeGg_UE_9UYcu6

Signatures

Stealerium family
stealerium

File Explorer

432-63-0x0000000000400000-0x0000000000584000-memory.dmp

.exe 1.5MB

432-63-0x0000000000400000-0x0000000000584000-memory.dmp

SHA256 ffe75146178fe683bc26fd415ddf825db4ca3c56e58fbed6342b35c6d192cb60
MD5 e461b7ae00f42947e1ab8338ad836df4
SHA1 2799cbdff03466056723de529106160d7ba64667
SHA512 2591809f60b1600335fd0ac65e3392773b1f13c9e6961b581c2b3ac5d3434ccb369f02bcea009dfff36e1133d851da8587378b46d19ef57d8990bfba1698b803
SSDEEP 24576:klAi2Q9NXw2/wPOjdGxYqfw+Jwz/S/6RZs8nVW6k5JHkARt7DBAqn:c/Tq24GjdGSgw+W7SCRnVQTEQ/BA8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

1572190

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing