stealerium | virus1[.]exe

General

Target
virus1.exe
Size 1.6MB
Sample230503-et73wadf43
SHA256 cd1a7450a8fdf0fb2ec37063706df6fe2b43977061a4645b439b3897c392c783
MD5 f81b231542b3920b330a62b781b9c8d2
SHA1 10114c273be842a22b84da646f7c70619b40e3a0
SHA512 0d6ceb8feeecdf034715963bff52c7c4d43250ccee74141e615c271e1e0aaabe29788ea4e1ca57ec458eed7dffec07b8ce0125acf2224293373792832193d71e
SSDEEP 24576:we88i2Q9NXw2/wPOjdGxY2rqkqjVnlqud+/2P+A+ZecdyFoBkkAnexMrdgL5:MTq24GjdGSiqkqXfd+/9AqYanieKd
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

stealerium

Malware Config

Extracted

Family

stealerium

C2

https://discord.com/api/webhooks/1094420775471169576/jxQtxV_Bl1bMK-9wE5tT-CcGZvhMCx0_SaP7mvCGLnEJ7bSWHVSJsXTEvjQcZTZVpPqZ

Signatures

Stealerium family
stealerium

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virus1.exe

File Explorer

virus1.exe

.exe 1.6MB

virus1.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 cd1a7450a8fdf0fb2ec37063706df6fe2b43977061a4645b439b3897c392c783
MD5 f81b231542b3920b330a62b781b9c8d2
SHA1 10114c273be842a22b84da646f7c70619b40e3a0
SHA512 0d6ceb8feeecdf034715963bff52c7c4d43250ccee74141e615c271e1e0aaabe29788ea4e1ca57ec458eed7dffec07b8ce0125acf2224293373792832193d71e
SSDEEP 24576:we88i2Q9NXw2/wPOjdGxY2rqkqjVnlqud+/2P+A+ZecdyFoBkkAnexMrdgL5:MTq24GjdGSiqkqXfd+/9AqYanieKd
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1630270

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing