sirkeira_stealer | f4149c3dc95f22a10fd1a162e9e2edb5a17376c1cca17ec8fbb8dd0c2942be0d

General

Target
skstealer.exe
Size 71.9MB
Sample260715-3fagfsbt7x
SHA256 f4149c3dc95f22a10fd1a162e9e2edb5a17376c1cca17ec8fbb8dd0c2942be0d
MD5 74dbb92d04ddecdaf0c0dbaabe5c30e4
SHA1 8206991c722e453ca379970f3ede222b3f958773
SHA512 1417ee3b9fc7254c895eed279182a239321a587109d1a0479f7884d65db279d522a639a6d11ffc75f1ffaed7fb2177a38798bc6cea84775594317658cb3cb39a
SSDEEP 1572864:19zW742qB4mTSJ3P3R8fNknAnZ2yOogqTcaNH21A/kCLaV+BbnULl9/Jg:19glqGP/h8fNknAnIdA7lxjGV+BbUz
TLSH
T195F733AF3FC2F646E5DBA6372302C8156D61960C8317C93767D81C3A7E2B2965A3E431
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  skstealer.exe
- Size 71.9MB
- SHA256 f4149c3dc95f22a10fd1a162e9e2edb5a17376c1cca17ec8fbb8dd0c2942be0d
- MD5 74dbb92d04ddecdaf0c0dbaabe5c30e4
- SHA1 8206991c722e453ca379970f3ede222b3f958773
- SHA512 1417ee3b9fc7254c895eed279182a239321a587109d1a0479f7884d65db279d522a639a6d11ffc75f1ffaed7fb2177a38798bc6cea84775594317658cb3cb39a
- SSDEEP 1572864:19zW742qB4mTSJ3P3R8fNknAnZ2yOogqTcaNH21A/kCLaV+BbnULl9/Jg:19glqGP/h8fNknAnIdA7lxjGV+BbUz
- TLSH
  T195F733AF3FC2F646E5DBA6372302C8156D61960C8317C93767D81C3A7E2B2965A3E431
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Drops startup file
- Loads dropped DLL
behavioral1 behavioral2
- Target
  skstealer.pyc
- Size 80KB
- SHA256 ef4a982e41c10ef4ef5fe231edc17994aa5c5d21af575750aa19ac0a57968ae1
- MD5 3b03ad4f977f0d58a2017f23dd8cb29b
- SHA1 78c88fa1d27de35bddd23db96dd61b8a749c74eb
- SHA512 7a9178cd423c657e5dd0023f41c55ee45cdf600b6b22bfc01d7039cec74ffe8e039fc96417dbb8c3bf76617b189b7dfe9c52c3aa13708d2f982b046404e64760
- SSDEEP 768:stqHIs/0ZiQqsYxBbOdMgunIaqRHVxMC8wY0QYNyNZPX0EKToft3E4aTkany+:kqHleizfbOMnEM7g1Toft3E4aI+
- TLSH
  T12B83E449BA6BC23FF8A4F1B594262B4FF32660B1B641830375FF90692F972205D511EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

sirkeira_stealer persistence stealer ransomware
- Detects Sirkeira Stealer Payload
- Family: SirkeiraStealer
  Sirkeira Stealer is a stealer written in Python and packaged with PyInstaller.
  stealer sirkeira_stealer
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops startup file

Loads dropped DLL

Detects Sirkeira Stealer Payload

Family: SirkeiraStealer

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4