stealerium | NitroSniper[.]exe

General

Target
NitroSniper.exe
Size 1.6MB
Sample230423-11d92agb96
SHA256 9cc27672a2e00c8d80aabd4864e94a8c9e8ad43b41766f7ff4fc3a86156ae842
MD5 5b81a9494933dffdbd7202d7f0a590ea
SHA1 d4b5d99bf0713adee5adf8ccc970ba43b11a597c
SHA512 d9ad0b530ce8af82f43db24860b2837d792b0f8ee386d04ece4881f028b6471919947e31a43dc98a83c22cfc438edeb63d980aec11029e07e31c1de812fc3680
SSDEEP 24576:MSOi2Q9NXw2/wPOjdGxY2rqkqjVnlqud+/2P+A+ZecdyFoBkkAnexMrdgLX:FTq24GjdGSiqkqXfd+/9AqYanieKd
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

stealerium

Malware Config

Extracted

Family

stealerium

C2

https://discordapp.com/api/webhooks/1099818116013375569/ni2fQxM0615aahQ27dB8Yh6FaugvCLHwCUGYP-1mCfammGHxLaBAmyfk9_huHQMAhHk8

Signatures

Stealerium family
stealerium

File Explorer

NitroSniper.exe

.exe 1.6MB

NitroSniper.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 9cc27672a2e00c8d80aabd4864e94a8c9e8ad43b41766f7ff4fc3a86156ae842
MD5 5b81a9494933dffdbd7202d7f0a590ea
SHA1 d4b5d99bf0713adee5adf8ccc970ba43b11a597c
SHA512 d9ad0b530ce8af82f43db24860b2837d792b0f8ee386d04ece4881f028b6471919947e31a43dc98a83c22cfc438edeb63d980aec11029e07e31c1de812fc3680
SSDEEP 24576:MSOi2Q9NXw2/wPOjdGxY2rqkqjVnlqud+/2P+A+ZecdyFoBkkAnexMrdgLX:FTq24GjdGSiqkqXfd+/9AqYanieKd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

1629886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing