Overview

overview

10

Static

static

10

0ddb866d33...ba.exe

windows7-x64

10

0ddb866d33...ba.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    58f5d3f738283351db8a2dbafb50be24.bin
  • Size 1.5MB
  • Sample230701-bp4ccafc36
  • SHA256 891f40ffc8ad4a49898448b357e842c1ae83703f7a2a29da2bb2d1d66ea56884
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
stealeriumstealer

Malware Config

Extracted

Family

  • stealerium

C2

  • https://discord.com/api/webhooks/1122279032260665414/W-unCHniD2YI670Bytn7FIpY-nux43_owoRzlVZOux3NvAnntnyH_9eSHWkJsi-nQBDo

Targets

    • Target
      0ddb866d33fa7277ea51dbaadd197e08318d1c6cd524c352ecb325cad85b82ba.exe
    • Size 1.6MB
    • SHA256 0ddb866d33fa7277ea51dbaadd197e08318d1c6cd524c352ecb325cad85b82ba
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    stealeriumstealer

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

      stealerstealerium

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks