stealerium | SoggaSupportCs2[.]zip

General

Target
SoggaSupportCs2.zip
Size 1.6MB
Sample240830-c8rckavekl
SHA256 c848f17ebd422126fa4624ed444b1dd517ed7824cd02cba320a9abf0630f9430
MD5 6b6dda854876c6d961823ac33e72803c
SHA1 28cd002bf1115411a8848d6dc9a179e4d4234f32
SHA512 d349d7ddd298ba3341c626af1422b1714db19ec6e2d47ed78446e0da3b5890c4b9e946d26ff1e929f3bdd5af1b5702dbf9abf1bc03d0f51d3e2702d76954e155
SSDEEP 49152:H9Tq24GjdGSiqkqXfd+/9AqYanieKd0UA:HYEjdGSiqkqXf0FLYWz
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

stealerium

Malware Config

Signatures

Stealerium family
stealerium

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SoggaSupportCs2.exe

File Explorer

SoggaSupportCs2.zip

.zip 1.6MB
SoggaSupportCs2.exe

.exe 1.6MB

SoggaSupportCs2.zip

SHA256 c848f17ebd422126fa4624ed444b1dd517ed7824cd02cba320a9abf0630f9430
MD5 6b6dda854876c6d961823ac33e72803c
SHA1 28cd002bf1115411a8848d6dc9a179e4d4234f32
SHA512 d349d7ddd298ba3341c626af1422b1714db19ec6e2d47ed78446e0da3b5890c4b9e946d26ff1e929f3bdd5af1b5702dbf9abf1bc03d0f51d3e2702d76954e155
SSDEEP 49152:H9Tq24GjdGSiqkqXfd+/9AqYanieKd0UA:HYEjdGSiqkqXf0FLYWz
MD5 SHA1 SHA512 SSDEEP

SoggaSupportCs2.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6c5935bcddaa1d4f809487f66db758e892cc0a7fd7704d138904bc879644ea1f
MD5 6627adf7167ee571e8fd6c8b1a0e8ae3
SHA1 03b9112660ee73c59d84e219f15bf24ae9df48db
SHA512 e05896a6e0d09d4dafeb2467395ca06ae1e728a4aa079041dea82940caeb71646984604fdeea482748423b10257b8462db4f573682f9f719939143fdb5691c60
SSDEEP 49152:19Tq24GjdGSiqkqXfd+/9AqYanieKd0U:1YEjdGSiqkqXf0FLYW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1630126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

SoggaSupportCs2.zip

SoggaSupportCs2.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

SoggaSupportCs2.zip

SoggaSupportCs2.exe

mscoree

dotnet