General

  • Target

    JaffaCakes118_635d73bffa652845629082094777732d3f37482ce2d24e72f15cd07977c49bbf

  • Size

    710.8MB

  • Sample

    241229-rdywgstjdw

  • MD5

    f8542e3fd05d0ccdad3a7a56fa9dc675

  • SHA1

    a50107bfa0429e3c8f9e80710057e8f1b620a3d5

  • SHA256

    635d73bffa652845629082094777732d3f37482ce2d24e72f15cd07977c49bbf

  • SHA512

    135b9472e053a24245191969d44f2c835703f8351357172755f4a34989ce1a211adfcd79700677cc2a3a23dcd8927b2e9e3db4c4a11130bab11f1a71566acf44

  • SSDEEP

    24576:5i2Q9NXw2/wPOjdGxY2rqkqjVnlqud+/2P+A+ZecdyFoBkkAnexMrdgLc:oTq24GjdGSiqkqXfd+/9AqYanieKd

Malware Config

Extracted

Family

stealerium

C2

https://discord.com/api/webhooks/1100795014843469874/QQny5mMq7HU-Eb1qYkLt5wXKkY7L_8SqtGW55nyYB2tpw-qDUtmemjTcPU9kn2V86aQN

Targets

    • Target

      JaffaCakes118_635d73bffa652845629082094777732d3f37482ce2d24e72f15cd07977c49bbf

    • Size

      710.8MB

    • MD5

      f8542e3fd05d0ccdad3a7a56fa9dc675

    • SHA1

      a50107bfa0429e3c8f9e80710057e8f1b620a3d5

    • SHA256

      635d73bffa652845629082094777732d3f37482ce2d24e72f15cd07977c49bbf

    • SHA512

      135b9472e053a24245191969d44f2c835703f8351357172755f4a34989ce1a211adfcd79700677cc2a3a23dcd8927b2e9e3db4c4a11130bab11f1a71566acf44

    • SSDEEP

      24576:5i2Q9NXw2/wPOjdGxY2rqkqjVnlqud+/2P+A+ZecdyFoBkkAnexMrdgLc:oTq24GjdGSiqkqXfd+/9AqYanieKd

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Stealerium family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks