General

  • Target

    c7e1b61e71f808d11a419985a63559c0N.exe

  • Size

    1.6MB

  • Sample

    240823-1n7e2syeld

  • MD5

    c7e1b61e71f808d11a419985a63559c0

  • SHA1

    9c531ce386ec27cefa3a0c91c2c2927edf0edeff

  • SHA256

    5931c1b43c10f231a937ab76246007cb0d1368854b21abef0aeb40aff093452b

  • SHA512

    2bbe247ba498807bdb9002f4de53278177f195eb2077e288fa489a8bafd18bbfc0770a07d00ba464fc9dbf25c9c54bf00626ec60d39585c391decf8b41a66564

  • SSDEEP

    49152:tcTq24GjdGSiqkqXfd+/9AqYanieKdY5:t9EjdGSiqkqXf0FLYW

Malware Config

Extracted

Family

stealerium

C2

https://discord.com/api/webhooks/1273604185342083122/M1_aOzidjVhUItxMcm-OGs70zmvYpA9GMoVkLLwtFwofxMWvvfCNx37gY3Rp5DJIOtEf

Targets

    • Target

      c7e1b61e71f808d11a419985a63559c0N.exe

    • Size

      1.6MB

    • MD5

      c7e1b61e71f808d11a419985a63559c0

    • SHA1

      9c531ce386ec27cefa3a0c91c2c2927edf0edeff

    • SHA256

      5931c1b43c10f231a937ab76246007cb0d1368854b21abef0aeb40aff093452b

    • SHA512

      2bbe247ba498807bdb9002f4de53278177f195eb2077e288fa489a8bafd18bbfc0770a07d00ba464fc9dbf25c9c54bf00626ec60d39585c391decf8b41a66564

    • SSDEEP

      49152:tcTq24GjdGSiqkqXfd+/9AqYanieKdY5:t9EjdGSiqkqXf0FLYW

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks