General
-
Target
build.exe
-
Size
1.6MB
-
Sample
240830-r1a3yayhla
-
MD5
86366242642c113508e0c867871a6f88
-
SHA1
0be6842fa3af56e1f918a848b867f185ff112036
-
SHA256
33510a96379d7a6059d7d6aa04bf7c75459175a00f97419ffb9e06f913c072cd
-
SHA512
7fc422ab805022481a4a722c4a2e582ef1c643e4b9354cbdccbe9374366885d546f9b9978b74d79fb3f9215263b1202a9f84764aa29953c5bcea597bf3078d87
-
SSDEEP
49152:hkTq24GjdGSiqkqXfd+/9AqYanieKds5:h1EjdGSiqkqXf0FLYW
Behavioral task
behavioral1
Sample
build.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
build.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
stealerium
https://discord.com/api/webhooks/1278991542597718046/aSlOzIg1Kb9e8QdgUSeQrKY3LmGAbWM2VlQZyIDj3bCkfMVOh2RfTeCoh2vqA2HDc4SP
Targets
-
-
Target
build.exe
-
Size
1.6MB
-
MD5
86366242642c113508e0c867871a6f88
-
SHA1
0be6842fa3af56e1f918a848b867f185ff112036
-
SHA256
33510a96379d7a6059d7d6aa04bf7c75459175a00f97419ffb9e06f913c072cd
-
SHA512
7fc422ab805022481a4a722c4a2e582ef1c643e4b9354cbdccbe9374366885d546f9b9978b74d79fb3f9215263b1202a9f84764aa29953c5bcea597bf3078d87
-
SSDEEP
49152:hkTq24GjdGSiqkqXfd+/9AqYanieKds5:h1EjdGSiqkqXf0FLYW
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Legitimate hosting services abused for malware hosting/C2
-