General

  • Target

    1388-55-0x0000000000B70000-0x0000000000BC4000-memory.dmp

  • Size

    336KB

  • Sample

    220401-fnmenaagdk

  • MD5

    c9d522b650a08a5ac3374240cd7e4da3

  • SHA1

    dc0b9124cad566be7b5e65f2528d8300b1040007

  • SHA256

    a49fd25b00e8ef3240caec0ccb08d0f0da1e4b5779f611c030df80b13f7ead11

  • SHA512

    b2e84b9bd22165307deb188695be15252c3974633c054d6ef9dd908f956f7564d48a62760f70c1fbfed5d25cd32d5bf0c6085025340b1e89fe4da6b8446a164f

Score
10/10

Malware Config

Extracted

Family

blackguard

C2

https://umpulumpu.ru/

Targets

    • Target

      1388-55-0x0000000000B70000-0x0000000000BC4000-memory.dmp

    • Size

      336KB

    • MD5

      c9d522b650a08a5ac3374240cd7e4da3

    • SHA1

      dc0b9124cad566be7b5e65f2528d8300b1040007

    • SHA256

      a49fd25b00e8ef3240caec0ccb08d0f0da1e4b5779f611c030df80b13f7ead11

    • SHA512

      b2e84b9bd22165307deb188695be15252c3974633c054d6ef9dd908f956f7564d48a62760f70c1fbfed5d25cd32d5bf0c6085025340b1e89fe4da6b8446a164f

    Score
    10/10
    • BlackGuard

      Infostealer first seen in Late 2021.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks