General

  • Target

    Loader_Patch.exe

  • Size

    4.6MB

  • Sample

    250126-26vdwaykhy

  • MD5

    09de1da7416bc4d06c80aad50e815914

  • SHA1

    9cdde8f6f0d089409b6b3906fe90c6f9ac14474c

  • SHA256

    63f44b2bb13c355ea34a33c00cfaf4f719b78a463055bdbcf361ff7ef901c7ca

  • SHA512

    8387585b798281ed02d848c6799954c7effe2612066695b1e89fb6a5a9b669f5c1a481030611eddcb2c0c0da9e91fa2cc2d055eb860eeb84c676277ec7c4ebce

  • SSDEEP

    98304:FtrbTA1sEyskZYOgVSKe1blpY02UrjooqqjHIFIeoEzkShdF6ueh87np:Xc1sEysyw6pY02UAoq8HIWeo6kC032p

Malware Config

Extracted

Family

stealerium

C2

https://api.telegram.org/bot7944498476:AAFDMdaCzUgaTzRefjkf7TykHhwwmm5XuCI/sendMessage?chat_id=

Attributes

Targets

    • Target

      Loader_Patch.exe

    • Size

      4.6MB

    • MD5

      09de1da7416bc4d06c80aad50e815914

    • SHA1

      9cdde8f6f0d089409b6b3906fe90c6f9ac14474c

    • SHA256

      63f44b2bb13c355ea34a33c00cfaf4f719b78a463055bdbcf361ff7ef901c7ca

    • SHA512

      8387585b798281ed02d848c6799954c7effe2612066695b1e89fb6a5a9b669f5c1a481030611eddcb2c0c0da9e91fa2cc2d055eb860eeb84c676277ec7c4ebce

    • SSDEEP

      98304:FtrbTA1sEyskZYOgVSKe1blpY02UrjooqqjHIFIeoEzkShdF6ueh87np:Xc1sEysyw6pY02UAoq8HIWeo6kC032p

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Stealerium family

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks