General

  • Target

    5ed737c07527e0a859a8811611e7808e3aa08346cc3c851e359fb2257523c0af

  • Size

    3.6MB

  • Sample

    241004-2b4ztszcjj

  • MD5

    29a0d5598f2b61f704fe46f5f0ee89a6

  • SHA1

    c4d8084c326b15c25d4187ee6a6c5800fd820937

  • SHA256

    5ed737c07527e0a859a8811611e7808e3aa08346cc3c851e359fb2257523c0af

  • SHA512

    85ed7d2703698dc6e9790fccdf229183942fa5da1da3c22f927a797a65a2746af337251b677552617c6142de1995c524e837e1e311b2e7df43dc21aa07280d92

  • SSDEEP

    98304:wEjdGSi3kqXf0FLYWCLbi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:i3kSILYWqZAkuujCPX9YG9he5GnQCAJS

Malware Config

Extracted

Family

stealerium

C2

https://api.telegram.org/bot

Targets

    • Target

      5ed737c07527e0a859a8811611e7808e3aa08346cc3c851e359fb2257523c0af

    • Size

      3.6MB

    • MD5

      29a0d5598f2b61f704fe46f5f0ee89a6

    • SHA1

      c4d8084c326b15c25d4187ee6a6c5800fd820937

    • SHA256

      5ed737c07527e0a859a8811611e7808e3aa08346cc3c851e359fb2257523c0af

    • SHA512

      85ed7d2703698dc6e9790fccdf229183942fa5da1da3c22f927a797a65a2746af337251b677552617c6142de1995c524e837e1e311b2e7df43dc21aa07280d92

    • SSDEEP

      98304:wEjdGSi3kqXf0FLYWCLbi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:i3kSILYWqZAkuujCPX9YG9he5GnQCAJS

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks