Overview

overview

10

Static

static

3

Pdf Reader.exe

windows10-ltsc 2021-x64

10

Resubmissions

04/02/2025, 15:52

250204-ta6g9szrg110

04/02/2025, 15:27

250204-svsaps1rcr10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Pdf Reader.exe
  • Size 73KB
  • Sample250204-svsaps1rcr
  • SHA256 2ea5686422bd8fb6eda542e9a96588f9deb1c97c45f3cb7d3b21ac4da540b57c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
stealeriumdiscoverystealer

Malware Config

Extracted

Family

  • stealerium

C2

  • https://api.telegram.org/bot6926474815:AAFx9tLAnf5OAVQZp2teS3G2_6T1wCP67xM/sendMessage?chat_id=-4224073938

Targets

    • Target
      Pdf Reader.exe
    • Size 73KB
    • SHA256 2ea5686422bd8fb6eda542e9a96588f9deb1c97c45f3cb7d3b21ac4da540b57c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    stealeriumdiscoverystealer

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

      stealerstealerium

    • Stealerium family

      stealerium

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks