Resubmissions

25/01/2022, 19:02

220125-xqabjsdea610

11/09/2021, 07:46

210911-jly78aecdr7

General

  • Target
    c156f5367443c436b6a54f16a725d261
  • Size 693KB
  • Sample220125-xqabjsdea6
  • SHA256 cba897dc82a468040a082fd6135edecb8dcdcd0f0fe1375adeaeff3262cc6504
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Family
  • blustealer

Credentials
  • Protocol

    smtp

  • Host

    bojtai.club

  • Port

    587

  • Password

    BqYD=SYf~ueg

Targets

    • Target
      c156f5367443c436b6a54f16a725d261
    • Size 693KB
    • SHA256 cba897dc82a468040a082fd6135edecb8dcdcd0f0fe1375adeaeff3262cc6504
    • MD5 SHA1 SHA512
    Score
    10/10
    • BluStealer

      A Modular information stealer written in Visual Basic.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks