Resubmissions

06/03/2024, 23:30

240306-3g8qmsbf62

06/03/2024, 23:27

240306-3fkmesce8y10

General

  • Target
    build.exe
  • Size 1.6MB
  • Sample240306-3fkmesce8y
  • SHA256 71bf5d575aaba8c36b389685083fa8be7f1da640b90a295fa08ba3e1f614d2f9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • stealerium

C2
  • https://discord.com/api/webhooks/746874720137510974/gFp2Kt67nYCbIxroRn1_VTAS1k-RlpmHIHGhPFuEtp4-B5VfIZyJ8ckhIQoyS2NaOJpO

Targets

    • Target
      build.exe
    • Size 1.6MB
    • SHA256 71bf5d575aaba8c36b389685083fa8be7f1da640b90a295fa08ba3e1f614d2f9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks