General
- Target stlr.exe
- Size 3.7MB
- Sample260808-ahtznaaf63
- SHA256 18df0ec2efba162d1774b1bf2233c2c24934d2bda49769e814f24d530a795c38
- MD5 eff677e44d0f001884e2982bb451d1af
- SHA1 01eadc4c72792e9f3aa96f3bff5c2f56f2a04081
- SHA512 55f0bee21e6dafd7e61cdedf5f33facc322ec89ba06172231b0cf6d66c739a20e12bae3a1921506629093ea567b443e1d5967b8811e205f277f32b6077894cf5
- SSDEEP 49152:LnK2vd/w6rbYTJfh7/jrh+wMa7uhRrRpCg7nFPLiVKB8R3:LnX1YJLh+la7MnB/Ba3
- TLSH T15D069D57FCE208F5C56A9272897265A67B60BC880F2253D72E50F6382FB3ED09D79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
stlr.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
stlr.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target stlr.exe
- Size 3.7MB
- SHA256 18df0ec2efba162d1774b1bf2233c2c24934d2bda49769e814f24d530a795c38
- MD5 eff677e44d0f001884e2982bb451d1af
- SHA1 01eadc4c72792e9f3aa96f3bff5c2f56f2a04081
- SHA512 55f0bee21e6dafd7e61cdedf5f33facc322ec89ba06172231b0cf6d66c739a20e12bae3a1921506629093ea567b443e1d5967b8811e205f277f32b6077894cf5
- SSDEEP 49152:LnK2vd/w6rbYTJfh7/jrh+wMa7uhRrRpCg7nFPLiVKB8R3:LnX1YJLh+la7MnB/Ba3
- TLSH T15D069D57FCE208F5C56A9272897265A67B60BC880F2253D72E50F6382FB3ED09D79704
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects SvcStealer Payload
SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.
-
Family: SvcStealer, Diamotrix
SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext