General

  • Target

    nllauncher.exe

  • Size

    1.6MB

  • MD5

    8d19556ec36067d8cd6aca0181a60d6f

  • SHA1

    d6b7827a278bde0072c6502137f3b48cd3c6fdd8

  • SHA256

    27fc27dc8fd2f14c597932236924b9bd221cbdf62e751b06654566df17e20e80

  • SHA512

    283ef56c211e43a850a7e08ea30da18f1aa5cec00636c48780d52cd1d350fe174b0ca9f3d6d9a92db72fe87b2822073703884aab999dc04821fbdf7c71369eea

  • SSDEEP

    49152:EcTq24GjdGSiqkqXfd+/9AqYanieKdY9:E9EjdGSiqkqXf0FLYW

Score
10/10

Malware Config

Extracted

Family

stealerium

C2

https://discord.com/api/webhooks/1085818065360535573/7X1FOgIeWfvo7Wm1i-5gmDKJfqx3bk315y0D-XXNtRIcxGsl95D_Vbwjx7jAmP_WpkUA

Signatures

  • Stealerium family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nllauncher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections