blustealer | 5d335e54d24acc66c730800a603208c2

General

Target
5d335e54d24acc66c730800a603208c2
Size 156KB
Sample220704-xd26ssagam
SHA256 2b661a8e53810cefbc9c2bb09e3aeea5607e6195160f3902bbf2ea7581ec82b5
MD5 5d335e54d24acc66c730800a603208c2
SHA1 94a7aea832f2021c7223f5cfd4c8d1dd074d1aef
SHA512 54237bd4ead4864cc3e644d57ba7837cdb2de35c965a63ca48a9afe148cce795b6be419001d1b7fb64159517ede76a79ca4ae053618c3263f456290870af974c
SSDEEP 1536:4Y/Zws3kTnvzbhNBPmxue2SRQg0dkEwiqoVio1OkleTAcXIJd97JBcYBKcVd:4UZTkLfhjFSiO3ovc7sdpL70Y
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

blustealer

Malware Config

Signatures

Blustealer family
blustealer

File Explorer

5d335e54d24acc66c730800a603208c2

.exe 156KB

5d335e54d24acc66c730800a603208c2

IMPHASH 5f2744f7699e7add028656a4b8cdcae1
SHA256 2b661a8e53810cefbc9c2bb09e3aeea5607e6195160f3902bbf2ea7581ec82b5
MD5 5d335e54d24acc66c730800a603208c2
SHA1 94a7aea832f2021c7223f5cfd4c8d1dd074d1aef
SHA512 54237bd4ead4864cc3e644d57ba7837cdb2de35c965a63ca48a9afe148cce795b6be419001d1b7fb64159517ede76a79ca4ae053618c3263f456290870af974c
SSDEEP 1536:4Y/Zws3kTnvzbhNBPmxue2SRQg0dkEwiqoVio1OkleTAcXIJd97JBcYBKcVd:4UZTkLfhjFSiO3ovc7sdpL70Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

7420

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 ord518 ord519 __vbaStrCat __vbaRecDestruct __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj _adj_fdiv_m32 ord666 ord667 __vbaAryDestruct __vbaLateMemSt ord593 __vbaExitProc __vbaForEachCollObj ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaBoolVarNull __vbaFpR8 _CIsin __vbaErase ord709 ord631 ord632 ord525 __vbaVarZero __vbaNextEachCollObj __vbaChkstk __vbaFileClose EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError __vbaStrCmp ord529 __vbaAryConstruct2 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarOr __vbaVarLateMemSt __vbaFpUI1 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaUI1I4 __vbaStrUI1 __vbaExceptHandler __vbaPrintFile __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 ord531 __vbaFPException ord717 ord532 __vbaInStrVar __vbaStrVarVal __vbaUbound __vbaVarCat ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaVar2Vec __vbaNew2 __vbaInStr __vbaVarLateMemCallLdRf _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 ord576 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord578 ord100 ord579 __vbaVarSetVar __vbaVarCmpEq __vbaAryLock __vbaLateMemCall __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaFpI4 __vbaVarCopy __vbaVarLateMemCallLd ord616 __vbaLateMemCallLd _CIatan __vbaAryCopy __vbaStrMove __vbaCastObj ord618 __vbaR8IntI4 __vbaStrVarCopy _allmul __vbaVarLateMemCallSt _CItan __vbaAryUnlock _CIexp ord580 __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing