General

  • Target
    Leane.exe
  • Size 3.6MB
  • Sample220306-n3grqacbfp
  • SHA256 d3b27ba36d01a6ed5492d662c20b38569b0019c29fe065e8f810b369fba76531
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • blackguard

C2
  • https://api.telegram.org/bot1840568117:AAGlvKQeSfXkObSE7__yYc5jM9o8qSrkFUw/sendMessage?chat_id=1039923904

Targets

    • Target
      Leane.exe
    • Size 3.6MB
    • SHA256 d3b27ba36d01a6ed5492d662c20b38569b0019c29fe065e8f810b369fba76531
    • MD5 SHA1 SHA512
    • BlackGuard

      Infostealer first seen in Late 2021.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks