General

  • Target

    buijp.exe

  • Size

    1.5MB

  • Sample

    220306-nv7ceacber

  • MD5

    d4e02002916f18576204a3f1722a958b

  • SHA1

    33ec434ad2c31de93e758b9d53fcf211c5b13702

  • SHA256

    9fff9895c476bee0cba9d3e209e841873f1756d18c40afa1b364bd2d8446997c

  • SHA512

    ca3b6c07c8454b136cb39a76b8d318b28ac9d437e846bfd7b4263f3b97eebdc963b48541fe6860377dda74cf6c049099311e0ee6e016de2b650a5eb0d7256455

Malware Config

Extracted

Family

blackguard

C2

https://api.telegram.org/bot5000057429:AAGzxzARC3DPcOsfaw0jKHEyHfyEfZqVYQM/sendMessage?chat_id=1283089701

Targets

    • Target

      buijp.exe

    • Size

      1.5MB

    • MD5

      d4e02002916f18576204a3f1722a958b

    • SHA1

      33ec434ad2c31de93e758b9d53fcf211c5b13702

    • SHA256

      9fff9895c476bee0cba9d3e209e841873f1756d18c40afa1b364bd2d8446997c

    • SHA512

      ca3b6c07c8454b136cb39a76b8d318b28ac9d437e846bfd7b4263f3b97eebdc963b48541fe6860377dda74cf6c049099311e0ee6e016de2b650a5eb0d7256455

    • BlackGuard

      Infostealer first seen in Late 2021.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks