Behavioral task
behavioral1
Sample
erbium.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
erbium.dll
Resource
win10v2004-20230220-en
General
-
Target
erbium.dll
-
Size
2.7MB
-
MD5
78458186578e35ac9b8539053d144d47
-
SHA1
4110152901a842e4e53f10647b91fe8d77c169c7
-
SHA256
e13f7019f8f66e379c29b0854bf93bd7f3f33fa02e890879094c1ee5213b7760
-
SHA512
cb16a166653d26b7294b8d5c67962b014dab9c0e89a7a9fe3605095e8de47296778f31f00cba6608cf7a8436b43661246049ee80a086bb9fe593df710e3d5548
-
SSDEEP
49152:Jzl1rpbUrqvv0v2rQVt8nqwI7lOOYcC2ek:P1Kqvv07noI7lOOYcG
Malware Config
Extracted
erbium
http://77.73.133.53/cloud/index.php
Signatures
-
Erbium family
Files
-
erbium.dll.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ