General

  • Target
    buijp.exe
  • Size 1.5MB
  • Sample220306-nv7ceacber
  • SHA256 9fff9895c476bee0cba9d3e209e841873f1756d18c40afa1b364bd2d8446997c
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • blackguard

C2
  • https://api.telegram.org/bot5000057429:AAGzxzARC3DPcOsfaw0jKHEyHfyEfZqVYQM/sendMessage?chat_id=1283089701

Targets

    • Target
      buijp.exe
    • Size 1.5MB
    • SHA256 9fff9895c476bee0cba9d3e209e841873f1756d18c40afa1b364bd2d8446997c
    • MD5 SHA1 SHA512
    • BlackGuard

      Infostealer first seen in Late 2021.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks