Extracted

• • Target

    SB.exe

  • Size

    3.6MB

  • MD5

    fdb22f1f1c47cb95abef9a087ec1df30

  • SHA1

    27904ce1e4f522c01dec40de3a1d25783d94d61e

  • SHA256

    fcbed64783aea65507256adf54f7aa4781cd68bf9ca52de0f804ac6b51ac0a0b

  • SHA512

    c469c8459a04cbcecac98974bac42ff74e2cea75140c39af0b7b074a94b3299b2fbeaef9fb8235151e98848c8416853cde4b5f4f155a9b3e1f5d2035120f8cc5

  • SSDEEP

    98304:OEjdGSi3kqXf0FLYWCLbi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:w3kSILYWqZAkuujCPX9YG9he5GnQCAJS

  Score

  10^/10

  stealeriumcollectiondiscoverypersistenceprivilege_escalationspywarestealer

  • Stealerium

    An open source info stealer written in C# first seen in May 2022.

    stealerstealerium

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1