Overview

overview

10

Static

static

10

Soft.exe

windows7_x64

10

Soft.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Soft.exe

  • Size

    1.2MB

  • Sample

    220304-rlpyjsehd7

  • MD5

    eb6c563af372d1af92ac2b60438d076d

  • SHA1

    9895725811ae5fda88629781daaa439c95a4976e

  • SHA256

    67843d45ba538eca29c63c3259d697f7e2ba84a3da941295b9207cdb01c85b71

  • SHA512

    e880144394cb5d7bbf8372c6eea88c288725651ba1ea4d52f38743cfc4278d52fa320f53eaedcc111781117436fd31897fc16d0e70e6b593c54a73bc405cca0f

Score
10/10
blackguardspywarestealer

Malware Config

Targets

    • Target

      Soft.exe

    • Size

      1.2MB

    • MD5

      eb6c563af372d1af92ac2b60438d076d

    • SHA1

      9895725811ae5fda88629781daaa439c95a4976e

    • SHA256

      67843d45ba538eca29c63c3259d697f7e2ba84a3da941295b9207cdb01c85b71

    • SHA512

      e880144394cb5d7bbf8372c6eea88c288725651ba1ea4d52f38743cfc4278d52fa320f53eaedcc111781117436fd31897fc16d0e70e6b593c54a73bc405cca0f

    Score
    10/10
    blackguardspywarestealer

    • BlackGuard

      Infostealer first seen in Late 2021.

      stealerblackguard

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks