Overview

overview

10

Static

static

3

47c17361cc...32.exe

windows7-x64

10

47c17361cc...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47c17361cce50f0bf4694b0180bdc7cdf7bb58858d9e16027967ace60ee86a32

  • Size

    1.6MB

  • Sample

    240723-lrg71azflm

  • MD5

    d90990e89a125adc3818829e6613a594

  • SHA1

    9aa6cde778b2e9e14df320cdb21db90083d724be

  • SHA256

    47c17361cce50f0bf4694b0180bdc7cdf7bb58858d9e16027967ace60ee86a32

  • SHA512

    df519f1d2cbd506e7b54326bf063c99690d06d48d740702704546a14d773171616852b6612d7b780c6ad9801b8f534f044762729cb0f824c5129a09ce8604f0a

  • SSDEEP

    49152:kkQTA8St2bBtOldq6iU/ShV+HGS3+cCnCPohbwaKl:ka1UjOGhVnS3Us88Zl

Score
10/10
stealeriumstealer

Malware Config

Targets

    • Target

      47c17361cce50f0bf4694b0180bdc7cdf7bb58858d9e16027967ace60ee86a32

    • Size

      1.6MB

    • MD5

      d90990e89a125adc3818829e6613a594

    • SHA1

      9aa6cde778b2e9e14df320cdb21db90083d724be

    • SHA256

      47c17361cce50f0bf4694b0180bdc7cdf7bb58858d9e16027967ace60ee86a32

    • SHA512

      df519f1d2cbd506e7b54326bf063c99690d06d48d740702704546a14d773171616852b6612d7b780c6ad9801b8f534f044762729cb0f824c5129a09ce8604f0a

    • SSDEEP

      49152:kkQTA8St2bBtOldq6iU/ShV+HGS3+cCnCPohbwaKl:ka1UjOGhVnS3Us88Zl

    Score
    10/10
    stealeriumstealer

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

      stealerstealerium

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks