Extracted

• • Target

    build.exe

  • Size

    3.6MB

  • MD5

    bebbda1425648d10a9feb049e04bee24

  • SHA1

    5771f752be63b935adea3cdc1ff74b1f65ba45a9

  • SHA256

    c9b0169f54ba231dd90ef7843cec3b379a0b0cfcd3c0b288453508f8690bd4d5

  • SHA512

    bf83c4f93bf869725bf23f641a9732aefab9c7b8f63626618dfe16f46b1a8ecb3da0e03568146e172aba26b5974f349db6ae440c5cfce47b02151576c3249f57

  • SSDEEP

    98304:4EjdGSi3kqXf0FLYWCLbi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:K3kSILYWqZAkuujCPX9YG9he5GnQCAJS

  Score

  10^/10

  stealeriumcollectiondiscoverypersistenceprivilege_escalationspywarestealer

  • Stealerium

    An open source info stealer written in C# first seen in May 2022.

    stealerstealerium

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1