Analysis
-
max time kernel
283s -
max time network
297s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
13-01-2024 04:11
General
-
Target
Stealerium.exe
-
Size
6.5MB
-
MD5
5459cb7f9a4d0ead8c2e57d91b7d8db9
-
SHA1
6f52b529b9f5e1fe796e70614c0084f05a7b01cf
-
SHA256
36c6338180350081adaf2ea52e4d39c29ddcbd4b7a52bc1a3d125ea97f6100be
-
SHA512
bfeb3bd6a35a0b7a8e9744a405e519e4ff6296612ec130a9170bc3f27bc96af136cf911b6dd87919319d212d14908dd46c56edf371a6253c58572365a2bf44d6
-
SSDEEP
98304:Nm8DwH8jFZikk6CmMkSxtK5AgHsJT1PC2OBcXWtPdtLifKcWMjeX9l75BHS8pttJ:Nm6E8H/COs1PCtbPd5xMkfGY3FtYIIS
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Stealerium.exe"C:\Users\Admin\AppData\Local\Temp\Stealerium.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB