General

  • Target

    5ed737c07527e0a859a8811611e7808e3aa08346cc3c851e359fb2257523c0af

  • Size

    3.6MB

  • MD5

    29a0d5598f2b61f704fe46f5f0ee89a6

  • SHA1

    c4d8084c326b15c25d4187ee6a6c5800fd820937

  • SHA256

    5ed737c07527e0a859a8811611e7808e3aa08346cc3c851e359fb2257523c0af

  • SHA512

    85ed7d2703698dc6e9790fccdf229183942fa5da1da3c22f927a797a65a2746af337251b677552617c6142de1995c524e837e1e311b2e7df43dc21aa07280d92

  • SSDEEP

    98304:wEjdGSi3kqXf0FLYWCLbi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:i3kSILYWqZAkuujCPX9YG9he5GnQCAJS

Score
10/10

Malware Config

Extracted

Family

stealerium

C2

https://api.telegram.org/bot

Signatures

  • Stealerium family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ed737c07527e0a859a8811611e7808e3aa08346cc3c851e359fb2257523c0af
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections