Behavioral task
behavioral1
Sample
AtikosExternal.exe
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
AtikosExternal.exe
Resource
win10v2004-20231215-en
General
-
Target
AtikosExternal.exe
-
Size
1.6MB
-
MD5
46690e78db85daefd68ece8c6f33e961
-
SHA1
e1e38baf2c7c83cf7e685a83199342c520652669
-
SHA256
17291a5235d0d22d58b8481e6651f8f2cfb45598ddd994440972e3be6cc98ce9
-
SHA512
5d6ef26234b0c35f7bd534f2bba4f0a66a434142f8e2d8c7b2207c6fa0f3e99bbb25e67c9dfb9d085a5fb9a28c9df22c57af8be78e2d041294beef91f37c6884
-
SSDEEP
49152:EkTq24GjdGSiqkqXfd+/9AqYanieKdsm:E1EjdGSiqkqXf0FLYW
Malware Config
Extracted
stealerium
https://discord.com/api/webhooks/1204924850506829834/j07dZl8IkPnJpyrDKz3avi_-wWdpdre6hrC1esgBraytV3ESJH8oredpgBWiw6ZfPPf3
Signatures
-
Stealerium family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AtikosExternal.exe
Files
-
AtikosExternal.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ