Overview

overview

10

Static

static

10

Builder.exe

windows7-x64

1

Builder.exe

windows10-2004-x64

1

Builder.exe

windows7-x64

1

Builder.exe

windows10-2004-x64

1

Mono.Cecil.Mdb.dll

windows7-x64

1

Mono.Cecil.Mdb.dll

windows10-2004-x64

1

Mono.Cecil.Pdb.dll

windows7-x64

1

Mono.Cecil.Pdb.dll

windows10-2004-x64

1

Mono.Cecil.Rocks.dll

windows7-x64

1

Mono.Cecil.Rocks.dll

windows10-2004-x64

1

Mono.Cecil.dll

windows7-x64

1

Mono.Cecil.dll

windows10-2004-x64

1

SixLabors....rp.dll

windows7-x64

1

SixLabors....rp.dll

windows10-2004-x64

1

Spectre.Co...rp.dll

windows7-x64

1

Spectre.Co...rp.dll

windows10-2004-x64

1

Spectre.Console.dll

windows7-x64

1

Spectre.Console.dll

windows10-2004-x64

1

Stub/stub.exe

windows7-x64

3

Stub/stub.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Stealerium1.zip

  • Size

    2.8MB

  • Sample

    240919-qhzg5s1bqk

  • MD5

    9d0982db376228f60b5088be486b3732

  • SHA1

    2d857eef9fa7c1106aa8fb27d0ff8cefdd8f81e2

  • SHA256

    52bd450723364176402cba89d3618f122c4106d6d4bd8f0eb183c098daa5f14a

  • SHA512

    7732971a9f3f17baa48605711f2fe072655f0a02f0e95702b0fb53d8786966cf9436e35fdc5c6e8ab11308f68f00ec830ccf2d65e4abcccebf61a79231c921a3

  • SSDEEP

    49152:tiEhIWdYcV84L/iexLO3eVKxR96nmWbVdUhlNOY6AuVHJ78q/9dVCazO4jC8Yz8M:t3HdbF8ussn1VdUh2tVHt8q/9v5G8YzP

Score
10/10
stealeriumdiscoverystealer

Malware Config

Targets

    • Target

      Builder.dll

    • Size

      216KB

    • MD5

      d111fef0621b1fc9ce2e295c1a68166b

    • SHA1

      6f4a4121e354a2731a05f94c003c62392fb690d6

    • SHA256

      6265fdfcd3704a0e32fb60909cc165ca6e2b9dc179076d3ac9ae98b75ca3db73

    • SHA512

      81957e0632a06bc2c5392463fec30ef7dfba9d040f6c4040b116e747adac8852c8e826c913594100f4efcf57195228a3f306e9e5145941a3f7011adb15c496ce

    • SSDEEP

      6144:SU53eDAIbr0K3xybL1tAj4PhFqFVfrRbP:SU53mbr0P1tAj4P6r9

    Score
    1/10
    behavioral1behavioral2

    • Target

      Builder.exe

    • Size

      147KB

    • MD5

      0c31d6cbe8f564cab8d3dce01decd6de

    • SHA1

      83ccc26f982d9f7d8749ccb842f73caae578a4f4

    • SHA256

      9a6c4f9fa40505580860859641650846c0e7df493105c85074fd3b3de0f4dbf3

    • SHA512

      0c67d0ce9fdcb9758ad5d5ef32c334d44950a342bf41fb88eb93f7a10d20ef2bb013be86a97c8530638a1fcdc7d54ffbf2802d6a8895da3d27c23f5bf9eb9a95

    • SSDEEP

      3072:A5vnr5Tbx829UOeKnn2LFzZBp13u36wKp40ULCgot:ABKjK2LFzZNf/ULl

    Score
    1/10
    behavioral3behavioral4

    • Target

      Mono.Cecil.Mdb.dll

    • Size

      38KB

    • MD5

      0c2d7a3d146e193d7b8e50f0fe398568

    • SHA1

      bf0a6ab31388eab1ffd3cd87fae62b45e90cba24

    • SHA256

      2bda97fc302904bf235d631e698a0c81324872dfad2a38e63ef66389155bfcf4

    • SHA512

      5fdc45ae536955e6f66970b35008ce15c5c5624d0b31bd41c79d6548d0d1b950042f51fe7dbbbc33a6256f90f5db23bf0070abe24502a050505be66f086d6df0

    • SSDEEP

      768:ArF3HuZyOt78PeWSTkazhOOgfGNOV/pVxPRpaCCrHpTFuzL4oWB:ArFecOt78PeWC8OgfGkVh6pTcL4oWB

    Score
    1/10
    behavioral5behavioral6

    • Target

      Mono.Cecil.Pdb.dll

    • Size

      87KB

    • MD5

      625ce2e8be214194a161fe80e6eca7d0

    • SHA1

      58944e03ee249618e9440545623c4545777377f7

    • SHA256

      333397769114ffd13046a25b9cfffd41c44a3450ea9ea1fd13b76eec28e1a815

    • SHA512

      c324ea36e4a89a6052f685e4f96527323ab6f4eea4f4c70c71f08a84df2d46332d91c3f289463502887d9b098dc6e69036c322630b770531927d5329873b250f

    • SSDEEP

      1536:mffXkeOyX+6C5S6R7nQSALYKXNgJGsZaBcLevjCXeo:ao5S6R7nNArWJGPBEeveXeo

    Score
    1/10
    behavioral7behavioral8

    • Target

      Mono.Cecil.Rocks.dll

    • Size

      26KB

    • MD5

      6fc634673b94c7ddde6e2ba277f7e7c7

    • SHA1

      f29feb86a8595d104b3b1b4be809f6e9fbc8f042

    • SHA256

      a6d3e6eab8d89dbd6fcf34268a08a6544ea142b6bcc5f665bee62317786b7892

    • SHA512

      51f4782d7a8e2b3ffbb8fedddcfe85379e5adc499a2fd55c29e29628ca9519c33a33daf806eb3b8d01cfc10c964c1cd2558152c000c7ed2a8584f36c58f31c51

    • SSDEEP

      768:tkU1iy+QMBCocUuk0ThROoUheLXG99gmIt:tkUCCo/KjOoUhpg

    Score
    1/10
    behavioral10behavioral9

    • Target

      Mono.Cecil.dll

    • Size

      351KB

    • MD5

      6d8d43c5d7dbe36ec01ff8b951cf1e0a

    • SHA1

      d6b8214419870770e1ce398ca06a6a9f0e9e62a3

    • SHA256

      9c2908709da6761e9b5b9d4d46102d65851145bac987787d6c5a05ffe5689487

    • SHA512

      221955b05d83513fadcb79721c96fd467ea871cfa401b279dc8ade426c88df4cadc884dae7a9c418c1012af202263f31ce8b63ca919e1f725eb7c7e8008c3a57

    • SSDEEP

      6144:eCDxMlG40kOSV1L6RWDv2F2AEJHwBI+aB:rG1J1LQFLE0I+

    Score
    1/10
    behavioral11behavioral12

    • Target

      SixLabors.ImageSharp.dll

    • Size

      1.7MB

    • MD5

      523dced95fcb0120698fc194b159a5cd

    • SHA1

      9f6e4c7269caaf2e09b6961551102b1ec16e60a0

    • SHA256

      0d19e3bc90153b7d0360360422355daa569209180dd1e4337f2431148d1d7219

    • SHA512

      325c9c3a316852ea6156a07317a64e369048dc7cfea21e9ea87f8723cf37515f0dfc0a31ab3bf07155ea27938d426c9832c1fcba1ab6c96573cc44eacfa05255

    • SSDEEP

      24576:3ruzK1lGe+34AbXwX8WcaMX07Bpu39DhpsRalM9FHBjDkck3IegDkspo4fVz:3oo6WcaMX0zYUkY

    Score
    1/10
    behavioral13behavioral14

    • Target

      Spectre.Console.ImageSharp.dll

    • Size

      16KB

    • MD5

      099edbe28aaacada8a7a12a414a1d68b

    • SHA1

      0cc1b8ed4448f4c7246dc859a6359fda20c2d927

    • SHA256

      52fef316879f90a3897ec33b8a6ca955bd720c8fe53b4479be01b70fcb7d26ee

    • SHA512

      07995720bc9e5d3b253b5cbe3f2700978950a81819d5064c25fbb6fe860c1cd1b32379136a390ab85f4612d82d4b256ba2d8c46cccdf9de04aab16135c2d6fe5

    • SSDEEP

      192:SZPAaThmPOaYDr59CUkZNd2AFSm8gCHWjPWfNx6CzOiUYvj4WLwTMVGqy5L5BR5/:iPAaWhq2PX2B1gC2KD6lY8WETKEX

    Score
    1/10
    behavioral15behavioral16

    • Target

      Spectre.Console.dll

    • Size

      693KB

    • MD5

      46684228e7c345a3368e8a475ec573b7

    • SHA1

      aef278fbd7b3f6a65227c7b6b64eb6d88f6cc433

    • SHA256

      b9617847d85b8efe32d07c4c28f1d16cadd4bfe45a09fd1e24eb82505f913257

    • SHA512

      ce3ca4c8250bca3e97713d4047d0d874b3b6430014fbc3078b34a9f701a9eaa4b5e990ff99864c19b41eba1dfad74e0f6f1a464bef7b3d5ad825dfcb91b3da31

    • SSDEEP

      12288:YqVvbKRNvezf2ZOIyY37mkrGpmiv+Y66i7oE4z6kX:nURNvU+SkUQ6icEl

    Score
    1/10
    behavioral17behavioral18

    • Target

      Stub/stub.exe

    • Size

      1.6MB

    • MD5

      02c88fe38285c217f895ff539c631fc5

    • SHA1

      b0d560a11ce564c5272e879f321688b97561f55c

    • SHA256

      7b7fb709fbfa417617beda6fdceb611b51f7d4d76881a106c0edf683fd170e36

    • SHA512

      45498d421c5f13af6382a2ee54c7e2a044a25334c4186450426e52b96c21b9fb97b17d6ddb515f47c9fb19ab5dab37e7bef0cfe0f544f9bb5896ea5ea18c667e

    • SSDEEP

      24576:v4XJi2Q9NXw2/wPOjdGxY2rJxkqjVnlqud+/2P+A+ZecdyFoBkkAqmZywr0G:ZTq24GjdGSiJxkqXfd+/9AqYanCLr

    Score
    10/10
    discoverystealeriumstealer

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

      stealerstealerium

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks