General
- Target Sryxen-Stealer-Rewrite_real.exe
- Size 2.9MB
- Sample260415-s3k7csct2j
- SHA256 23e843b6024c66eb7da869b42e0b6de787a09b2bfb6ed32d5956f94b2ea9fcf0
- MD5 574b93458b84e8d6b962a7bc6bc05e9e
- SHA1 d8832c5c942a851438097c9fa00e52e0fbdba8dc
- SHA512 889d48b1f62ab52aea307b09f817878540edcf47cec20b8cf1f887838f27e5fa18303d34189777788ede0aecd897de4f447782ea907f40f37355e0a9c096a18f
- SSDEEP 24576:ahrIvhKqUXt3hFyqXKqWUTV1V1V1VeKJ6BOPhbAM3Tfp3I+ASr5k+YhJnJnEDZBR:a1IWX9yqXKqWUDJbbpIei7hH/M
- TLSH T165E5F8EEDA7F11E9C0B7D0B8A157721BF9A1384943B557C752908F0A2B13AE4A97D3C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Sryxen-Stealer-Rewrite_real.exe
Resource
win10v2004-20260130-en
13 signatures
600 seconds
Behavioral task
behavioral2
Sample
Sryxen-Stealer-Rewrite_real.exe
Resource
win11-20260130-en
13 signatures
600 seconds
Malware Config
Targets
-
- Target Sryxen-Stealer-Rewrite_real.exe
- Size 2.9MB
- SHA256 23e843b6024c66eb7da869b42e0b6de787a09b2bfb6ed32d5956f94b2ea9fcf0
- MD5 574b93458b84e8d6b962a7bc6bc05e9e
- SHA1 d8832c5c942a851438097c9fa00e52e0fbdba8dc
- SHA512 889d48b1f62ab52aea307b09f817878540edcf47cec20b8cf1f887838f27e5fa18303d34189777788ede0aecd897de4f447782ea907f40f37355e0a9c096a18f
- SSDEEP 24576:ahrIvhKqUXt3hFyqXKqWUTV1V1V1VeKJ6BOPhbAM3Tfp3I+ASr5k+YhJnJnEDZBR:a1IWX9yqXKqWUDJbbpIei7hH/M
- TLSH T165E5F8EEDA7F11E9C0B7D0B8A157721BF9A1384943B557C752908F0A2B13AE4A97D3C0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Uses browser remote debugging
Can be used control the browser and steal sensitive information such as credentials and session cookies.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Modify Authentication Process
1Steal Web Session Cookie
1Unsecured Credentials
1Credentials In Files
1