stealerium

Sharing

Copy URL Twitter E-mail

General

Target
Stealerium (1).zip
Size 2.8MB
Sample240919-d2mlgaydpc
SHA256 52bd450723364176402cba89d3618f122c4106d6d4bd8f0eb183c098daa5f14a
MD5 9d0982db376228f60b5088be486b3732
SHA1 2d857eef9fa7c1106aa8fb27d0ff8cefdd8f81e2
SHA512 7732971a9f3f17baa48605711f2fe072655f0a02f0e95702b0fb53d8786966cf9436e35fdc5c6e8ab11308f68f00ec830ccf2d65e4abcccebf61a79231c921a3
SSDEEP 49152:tiEhIWdYcV84L/iexLO3eVKxR96nmWbVdUhlNOY6AuVHJ78q/9dVCazO4jC8Yz8M:t3HdbF8ussn1VdUh2tVHt8q/9v5G8YzP
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  Builder.dll
- Size 216KB
- SHA256 6265fdfcd3704a0e32fb60909cc165ca6e2b9dc179076d3ac9ae98b75ca3db73
- MD5 d111fef0621b1fc9ce2e295c1a68166b
- SHA1 6f4a4121e354a2731a05f94c003c62392fb690d6
- SHA512 81957e0632a06bc2c5392463fec30ef7dfba9d040f6c4040b116e747adac8852c8e826c913594100f4efcf57195228a3f306e9e5145941a3f7011adb15c496ce
- SSDEEP 6144:SU53eDAIbr0K3xybL1tAj4PhFqFVfrRbP:SU53mbr0P1tAj4P6r9
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  Builder.exe
- Size 147KB
- SHA256 9a6c4f9fa40505580860859641650846c0e7df493105c85074fd3b3de0f4dbf3
- MD5 0c31d6cbe8f564cab8d3dce01decd6de
- SHA1 83ccc26f982d9f7d8749ccb842f73caae578a4f4
- SHA512 0c67d0ce9fdcb9758ad5d5ef32c334d44950a342bf41fb88eb93f7a10d20ef2bb013be86a97c8530638a1fcdc7d54ffbf2802d6a8895da3d27c23f5bf9eb9a95
- SSDEEP 3072:A5vnr5Tbx829UOeKnn2LFzZBp13u36wKp40ULCgot:ABKjK2LFzZNf/ULl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  Mono.Cecil.Mdb.dll
- Size 38KB
- SHA256 2bda97fc302904bf235d631e698a0c81324872dfad2a38e63ef66389155bfcf4
- MD5 0c2d7a3d146e193d7b8e50f0fe398568
- SHA1 bf0a6ab31388eab1ffd3cd87fae62b45e90cba24
- SHA512 5fdc45ae536955e6f66970b35008ce15c5c5624d0b31bd41c79d6548d0d1b950042f51fe7dbbbc33a6256f90f5db23bf0070abe24502a050505be66f086d6df0
- SSDEEP 768:ArF3HuZyOt78PeWSTkazhOOgfGNOV/pVxPRpaCCrHpTFuzL4oWB:ArFecOt78PeWC8OgfGkVh6pTcL4oWB
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  Mono.Cecil.Pdb.dll
- Size 87KB
- SHA256 333397769114ffd13046a25b9cfffd41c44a3450ea9ea1fd13b76eec28e1a815
- MD5 625ce2e8be214194a161fe80e6eca7d0
- SHA1 58944e03ee249618e9440545623c4545777377f7
- SHA512 c324ea36e4a89a6052f685e4f96527323ab6f4eea4f4c70c71f08a84df2d46332d91c3f289463502887d9b098dc6e69036c322630b770531927d5329873b250f
- SSDEEP 1536:mffXkeOyX+6C5S6R7nQSALYKXNgJGsZaBcLevjCXeo:ao5S6R7nNArWJGPBEeveXeo
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  Mono.Cecil.Rocks.dll
- Size 26KB
- SHA256 a6d3e6eab8d89dbd6fcf34268a08a6544ea142b6bcc5f665bee62317786b7892
- MD5 6fc634673b94c7ddde6e2ba277f7e7c7
- SHA1 f29feb86a8595d104b3b1b4be809f6e9fbc8f042
- SHA512 51f4782d7a8e2b3ffbb8fedddcfe85379e5adc499a2fd55c29e29628ca9519c33a33daf806eb3b8d01cfc10c964c1cd2558152c000c7ed2a8584f36c58f31c51
- SSDEEP 768:tkU1iy+QMBCocUuk0ThROoUheLXG99gmIt:tkUCCo/KjOoUhpg
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  Mono.Cecil.dll
- Size 351KB
- SHA256 9c2908709da6761e9b5b9d4d46102d65851145bac987787d6c5a05ffe5689487
- MD5 6d8d43c5d7dbe36ec01ff8b951cf1e0a
- SHA1 d6b8214419870770e1ce398ca06a6a9f0e9e62a3
- SHA512 221955b05d83513fadcb79721c96fd467ea871cfa401b279dc8ade426c88df4cadc884dae7a9c418c1012af202263f31ce8b63ca919e1f725eb7c7e8008c3a57
- SSDEEP 6144:eCDxMlG40kOSV1L6RWDv2F2AEJHwBI+aB:rG1J1LQFLE0I+
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  SixLabors.ImageSharp.dll
- Size 1.7MB
- SHA256 0d19e3bc90153b7d0360360422355daa569209180dd1e4337f2431148d1d7219
- MD5 523dced95fcb0120698fc194b159a5cd
- SHA1 9f6e4c7269caaf2e09b6961551102b1ec16e60a0
- SHA512 325c9c3a316852ea6156a07317a64e369048dc7cfea21e9ea87f8723cf37515f0dfc0a31ab3bf07155ea27938d426c9832c1fcba1ab6c96573cc44eacfa05255
- SSDEEP 24576:3ruzK1lGe+34AbXwX8WcaMX07Bpu39DhpsRalM9FHBjDkck3IegDkspo4fVz:3oo6WcaMX0zYUkY
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  Spectre.Console.ImageSharp.dll
- Size 16KB
- SHA256 52fef316879f90a3897ec33b8a6ca955bd720c8fe53b4479be01b70fcb7d26ee
- MD5 099edbe28aaacada8a7a12a414a1d68b
- SHA1 0cc1b8ed4448f4c7246dc859a6359fda20c2d927
- SHA512 07995720bc9e5d3b253b5cbe3f2700978950a81819d5064c25fbb6fe860c1cd1b32379136a390ab85f4612d82d4b256ba2d8c46cccdf9de04aab16135c2d6fe5
- SSDEEP 192:SZPAaThmPOaYDr59CUkZNd2AFSm8gCHWjPWfNx6CzOiUYvj4WLwTMVGqy5L5BR5/:iPAaWhq2PX2B1gC2KD6lY8WETKEX
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  Spectre.Console.dll
- Size 693KB
- SHA256 b9617847d85b8efe32d07c4c28f1d16cadd4bfe45a09fd1e24eb82505f913257
- MD5 46684228e7c345a3368e8a475ec573b7
- SHA1 aef278fbd7b3f6a65227c7b6b64eb6d88f6cc433
- SHA512 ce3ca4c8250bca3e97713d4047d0d874b3b6430014fbc3078b34a9f701a9eaa4b5e990ff99864c19b41eba1dfad74e0f6f1a464bef7b3d5ad825dfcb91b3da31
- SSDEEP 12288:YqVvbKRNvezf2ZOIyY37mkrGpmiv+Y66i7oE4z6kX:nURNvU+SkUQ6icEl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  Stub/stub.exe
- Size 1.6MB
- SHA256 7b7fb709fbfa417617beda6fdceb611b51f7d4d76881a106c0edf683fd170e36
- MD5 02c88fe38285c217f895ff539c631fc5
- SHA1 b0d560a11ce564c5272e879f321688b97561f55c
- SHA512 45498d421c5f13af6382a2ee54c7e2a044a25334c4186450426e52b96c21b9fb97b17d6ddb515f47c9fb19ab5dab37e7bef0cfe0f544f9bb5896ea5ea18c667e
- SSDEEP 24576:v4XJi2Q9NXw2/wPOjdGxY2rJxkqjVnlqud+/2P+A+ZecdyFoBkkAqmZywr0G:ZTq24GjdGSiJxkqXfd+/9AqYanCLr
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

discovery stealerium stealer
- Stealerium
  An open source info stealer written in C# first seen in May 2022.
  stealer stealerium
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral19 behavioral20

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20