General
- Target build.exe
- Size 1.6MB
- Sample240306-3fkmesce8y
- SHA256 71bf5d575aaba8c36b389685083fa8be7f1da640b90a295fa08ba3e1f614d2f9
- MD5 b0a07f6e30e44b4deaabd473bb47279c
- SHA1 1b23f54df9433867f891598b6d6c0c49ee9c60ae
- SHA512 88c163371cd8aff7f1640cf0f9ea3d2794a5afa410407e74b66bcaf49ab2d53878fa58a3eccf6ee291ddac2bc790c481dedefc0b790989f016dfa986c63327c7
- SSDEEP 49152:7kTq24GjdGSiqkqXfd+/9AqYanieKdsV:71EjdGSiqkqXf0FLYW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
build.exe
Resource
win7-20240215-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
build.exe
Resource
win10v2004-20240226-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
stealerium
C2
-
https://discord.com/api/webhooks/746874720137510974/gFp2Kt67nYCbIxroRn1_VTAS1k-RlpmHIHGhPFuEtp4-B5VfIZyJ8ckhIQoyS2NaOJpO
Targets
-
- Target build.exe
- Size 1.6MB
- SHA256 71bf5d575aaba8c36b389685083fa8be7f1da640b90a295fa08ba3e1f614d2f9
- MD5 b0a07f6e30e44b4deaabd473bb47279c
- SHA1 1b23f54df9433867f891598b6d6c0c49ee9c60ae
- SHA512 88c163371cd8aff7f1640cf0f9ea3d2794a5afa410407e74b66bcaf49ab2d53878fa58a3eccf6ee291ddac2bc790c481dedefc0b790989f016dfa986c63327c7
- SSDEEP 49152:7kTq24GjdGSiqkqXfd+/9AqYanieKdsV:71EjdGSiqkqXf0FLYW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Legitimate hosting services abused for malware hosting/C2