stealerium | 1604-952-0x0000000000400000-0x0000000000592000-memory[.]dmp

General

Target
1604-952-0x0000000000400000-0x0000000000592000-memory.dmp
Size 1.6MB
Sample240301-a2na8agh6t
SHA256 9490e106f83de77a86b22dbba31b0895b27d9b1137b3657c71c9049deb60fbc1
MD5 ba21bd8ebb1fb22850555d594c7fa442
SHA1 ba67d240eb797bd9bc6267ca895bfc28409fb8a9
SHA512 0452224d2c36dd791b8f2b24905189b0f3cc715224bc5acc9cf1b8bcaca8a06c1e3a87f0a007020ad499cb6ab97f797872547c90ba20d9d8a686c007d4dc7f62
SSDEEP 49152:XkTq24GjdGSiqkqXfd+/9AqYanieKdsr:X1EjdGSiqkqXf0FLYW
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

stealerium

Malware Config

Extracted

Family

stealerium

C2

https://discordapp.com/api/webhooks/1197850806213431377/-zU9uA2NeaYEk4-ozdhgmNljI6NS_w_qcT_cbtxYxZdkUD3JeaKChZp4GXdod-MX3D1Q

Signatures

Stealerium family
stealerium

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1604-952-0x0000000000400000-0x0000000000592000-memory.dmp

File Explorer

1604-952-0x0000000000400000-0x0000000000592000-memory.dmp

.exe 1.6MB

1604-952-0x0000000000400000-0x0000000000592000-memory.dmp

SHA256 9490e106f83de77a86b22dbba31b0895b27d9b1137b3657c71c9049deb60fbc1
MD5 ba21bd8ebb1fb22850555d594c7fa442
SHA1 ba67d240eb797bd9bc6267ca895bfc28409fb8a9
SHA512 0452224d2c36dd791b8f2b24905189b0f3cc715224bc5acc9cf1b8bcaca8a06c1e3a87f0a007020ad499cb6ab97f797872547c90ba20d9d8a686c007d4dc7f62
SSDEEP 49152:XkTq24GjdGSiqkqXfd+/9AqYanieKdsr:X1EjdGSiqkqXf0FLYW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1961131247

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing