Overview

overview

10

Static

static

10

build.zip

windows10-2004-x64

10

Resubmissions

31/08/2024, 16:29

240831-tzremstfjb10

12/08/2024, 14:11

240812-rhryqsvarm10

Sharing

Copy URL Twitter E-mail

General

  • Target
    build.zip
  • Size 1.5MB
  • Sample240812-rhryqsvarm
  • SHA256 fcab46de9f908679cb3d618e2cfb621e62114e5fd58339e112096d9f7e2b0f88
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
stealeriummicrosoftdiscoveryphishingstealer

Malware Config

Extracted

Family

  • stealerium

C2

  • https://discord.com/api/webhooks/1272310044310114345/XovSJwd5sMLQ9WJP_wnPvRrjoRQW3rAHVrVHbTRgEdifmYlfIAmCMdk0VqZcOtuLXiTT

Targets

    • Target
      build.zip
    • Size 1.5MB
    • SHA256 fcab46de9f908679cb3d618e2cfb621e62114e5fd58339e112096d9f7e2b0f88
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    stealeriummicrosoftdiscoveryphishingstealer

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

      stealerstealerium

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks