General

  • Target

    build.exe

  • Size

    1.6MB

  • Sample

    231020-eff28sfc34

  • MD5

    8ae754931d3fad28ddd1a546a7399dd9

  • SHA1

    1a3aad1b59e23233085538490681119fb9f3e3f2

  • SHA256

    a1d070e57e5d9002274f814372596fd59e4ed49ec373020c45ec2ed1f8bf847d

  • SHA512

    f6ad9715f0638c0172c4ff151062778e94d4e5d3dd8bdb5fee92862963f497889dbea44210d785b02a3b25e20a1a040197b2e9c1949507f01577a44365f99628

  • SSDEEP

    24576:Oi2Q9NXw2/wPOjdGxY2rqkqjVnlqud+/2P+A+ZecdyFoBkkAnexMrdgLn:ZTq24GjdGSiqkqXfd+/9AqYanieKd

Score
10/10

Malware Config

Extracted

Family

stealerium

C2

https://canary.discord.com/api/webhooks/1164771273088438373/LkV7kaD1cZ_ThsbQhH-c6fV9W3Srl_WFpWGvMsPDPwn78bGXZB91nVl5bieA39v-Xvru

Targets

    • Target

      build.exe

    • Size

      1.6MB

    • MD5

      8ae754931d3fad28ddd1a546a7399dd9

    • SHA1

      1a3aad1b59e23233085538490681119fb9f3e3f2

    • SHA256

      a1d070e57e5d9002274f814372596fd59e4ed49ec373020c45ec2ed1f8bf847d

    • SHA512

      f6ad9715f0638c0172c4ff151062778e94d4e5d3dd8bdb5fee92862963f497889dbea44210d785b02a3b25e20a1a040197b2e9c1949507f01577a44365f99628

    • SSDEEP

      24576:Oi2Q9NXw2/wPOjdGxY2rqkqjVnlqud+/2P+A+ZecdyFoBkkAnexMrdgLn:ZTq24GjdGSiqkqXfd+/9AqYanieKd

    Score
    10/10
    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks