Resubmissions

19/08/2024, 00:59

240819-bckpgaycjl

19/08/2024, 00:54

240819-a9eztavdph10

19/08/2024, 00:49

240819-a6ngsavcle10

General

  • Target
    build.zip
  • Size 2.9MB
  • Sample240819-a9eztavdph
  • SHA256 76621536f29a688e86b6964cbb88f51813f4858c57f375bc7387b7e2b138cdb6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • stealerium

C2
  • https://discord.com/api/webhooks/1274884697553633374/cgftOG3YEk0chdJS0rgECfP4MTRVQH9YeUPXq8YHtw-rsy_AIXIhYb8KMgXRIBxfhD--

Targets

    • Target
      build.exe
    • Size 1.6MB
    • SHA256 7c9347b21eb3fde58070c1326ca7f6c9239dc2f0969b413ae4c6539b8f306f43
    • MD5 SHA1 SHA512 SSDEEP
    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Legitimate hosting services abused for malware hosting/C2

    • Target
      stub.exe
    • Size 1.6MB
    • SHA256 6c5935bcddaa1d4f809487f66db758e892cc0a7fd7704d138904bc879644ea1f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks