General

  • Target

    build.exe

  • Size

    1.6MB

  • Sample

    240922-zalqrawcln

  • MD5

    fb111e67b5d4845e9648a544e69e981a

  • SHA1

    c42ec9164e91a372d2e58b28aa01b3e6a70fcbba

  • SHA256

    4bddf95f83ecc87c301b4c638f1c926ef1bf83791a9c460e6accbd61a93b7728

  • SHA512

    1b8f655ef6cec5f6db944cd0c06adbd15418b2b51a0c637be5f2b2e283d7c3b88de4ea90d8ddb4ad03db81dcbd7bbc39713aa96d7973a2fd5b68955877399d73

  • SSDEEP

    24576:a3i2I9NXw2/wPOjdGxY2rJxkqjVnlqud+/2P+A+ZecdyFoBkkAqmZywQ0P:V5q24GjdGSiJxkqXfd+/9AsYanCLQ

Malware Config

Extracted

Family

stealerium

C2

https://discord.com/api/webhooks/1287511157393064020/PVImWNVThNjjtEtKq8ghoJD_4bVBYx4zmOKo2E40-S87fESeCrD9Qv-jbGGDh7E1Csyz

Targets

    • Target

      build.exe

    • Size

      1.6MB

    • MD5

      fb111e67b5d4845e9648a544e69e981a

    • SHA1

      c42ec9164e91a372d2e58b28aa01b3e6a70fcbba

    • SHA256

      4bddf95f83ecc87c301b4c638f1c926ef1bf83791a9c460e6accbd61a93b7728

    • SHA512

      1b8f655ef6cec5f6db944cd0c06adbd15418b2b51a0c637be5f2b2e283d7c3b88de4ea90d8ddb4ad03db81dcbd7bbc39713aa96d7973a2fd5b68955877399d73

    • SSDEEP

      24576:a3i2I9NXw2/wPOjdGxY2rJxkqjVnlqud+/2P+A+ZecdyFoBkkAqmZywQ0P:V5q24GjdGSiJxkqXfd+/9AsYanCLQ

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks