Resubmissions

31/08/2024, 16:29

240831-tzremstfjb10

12/08/2024, 14:11

240812-rhryqsvarm10

General

  • Target
    build.zip
  • Size 1.5MB
  • Sample240831-tzremstfjb
  • SHA256 fcab46de9f908679cb3d618e2cfb621e62114e5fd58339e112096d9f7e2b0f88
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • stealerium

C2
  • https://discord.com/api/webhooks/1272310044310114345/XovSJwd5sMLQ9WJP_wnPvRrjoRQW3rAHVrVHbTRgEdifmYlfIAmCMdk0VqZcOtuLXiTT

Targets

    • Target
      build.exe
    • Size 1.6MB
    • SHA256 45e46fcb41b84552a0d54e1925f2df1ae3883d2645c8d3b4084546943e81f426
    • MD5 SHA1 SHA512 SSDEEP
    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks