General

  • Target
    Leane.exe
  • Size 4.0MB
  • Sample220306-n2xrjsadh7
  • SHA256 26ebf8a0830652c9ea0de64dc0dca6d62caffc0aaa34abf43e7c410095c502ce
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • blackguard

C2
  • https://api.telegram.org/bot1840568117:AAGlvKQeSfXkObSE7__yYc5jM9o8qSrkFUw/sendMessage?chat_id=1039923904

Targets

    • Target
      Leane.exe
    • Size 4.0MB
    • SHA256 26ebf8a0830652c9ea0de64dc0dca6d62caffc0aaa34abf43e7c410095c502ce
    • MD5 SHA1 SHA512
    • BlackGuard

      Infostealer first seen in Late 2021.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks