Extracted

• • Target

    Listado Facturas.exe

  • Size

    7.9MB

  • MD5

    e44441da8f8b45b56e6b46ab5ddf4736

  • SHA1

    d8b09914d7e463e72ddc13206b86c3d90aa993c2

  • SHA256

    10fb218b942d8e1e9e070b82f01ce72128a19e97158003b53686b4d7a03a8aa8

  • SHA512

    84f5c7299e954d773ac2c65c3849dbf2bb4a4fefc395a8afc6cb30ee236d9d37d5cfb5caefdb7a906ea5a8a11884fb0c64483f2c454ac00232d79701676cfa20

  • SSDEEP

    196608:8R1r9MalxTjLcUeLs8fk4kgQeo49tAQxVEkWxATVmVg5NsED5lO4:sria3TjYs8M4kPeo4fAHxsVSgw85

  Score

  10^/10

  stealeriumstealer

  • Stealerium

    An open source info stealer written in C# first seen in May 2022.

    stealerstealerium

  • Stealerium family

    stealerium

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2