General

  • Target

    PWS;MSIL.Stealgen!atmn.zip

  • Size

    1.5MB

  • MD5

    881a716b5d107980b7bb07b4f6702cea

  • SHA1

    6edcafee65eed8fadac816eb8e0c012c74766aca

  • SHA256

    0502f7a1fb4291a9d28065ca0b0d008cda80a6ac7f7d702c58bfa29d6f93e6fe

  • SHA512

    5263c08aa9639da323eaab3ca61ab232b98d8cffcd7eb51218ce6c83d2d600338c88295d99b991337666f4b1c15b5fa9380ae0e07f78d363565cb35852e35c31

  • SSDEEP

    24576:6dhEiSkoDJTu6Vsbym9aDWL1hALqjV/lOupdjj1tswtsdccS/An7lkt6hscRz3XB:dVU6iym9/ALqzzpdjj1tstSm91zB

Score
10/10

Malware Config

Extracted

Family

stealerium

C2

https://discord.com/api/webhooks/1248794127844511816/6WHa8W9Q7QXNJVNyVqOMcnqPq2Hi62zl2ippfrvizBBkGQ-lNFYvv-6-R9ibZ0DY4CWq

Signatures

  • Stealerium family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • PWS;MSIL.Stealgen!atmn.zip
    .zip
  • PWS;MSIL.Stealgen!atmn.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections