Extracted

• • Target

    build.bin

  • Size

    3.6MB

  • MD5

    8b561e03d153ec263381d6aa1bd1f109

  • SHA1

    593bf8a787cf5b186d1bb117515d137f154e1503

  • SHA256

    0d11e0d8d1204d1e8a953d13cd3e88e4715e8c06d8c695d32eb41a80207ce707

  • SHA512

    50c98ead4e1635c5b27b4f094a7feb0b315bca054251e3e70541e87c48c3e1b93adb24ba21f05b2fa3a90fd6b8e38591e223980140737841f4604c66b14845c1

  • SSDEEP

    98304:WEjdGSi3kqXf0FLYWCLbi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:43kSILYWqZAkuujCPX9YG9he5GnQCAJS

  Score

  10^/10

  stealeriumcollectiondiscoverypersistenceprivilege_escalationspywarestealer

  • Stealerium

    An open source info stealer written in C# first seen in May 2022.

    stealerstealerium

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1