Overview

overview

10

Static

static

10

50de304cff...b9.exe

windows7_x64

6

50de304cff...b9.exe

windows10-2004_x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    50de304cffc8136ad4710f12411bb8b9
  • Size 440KB
  • Sample220712-cfjr1sehfp
  • SHA256 9b83c1efc74833172375826612ca54ccf601b3b2bf24dab96b63da8a41dfbeb8
  • MD5 SHA1 SHA512
Score
10/10
blustealercollection

Malware Config

Extracted

Family

  • blustealer

C2

  • https://api.telegram.org/bot5342659004:AAGqxS1lLf8YUjRqLBmCvuPBmTvA5EVHVE/sendMessage?chat_id=5464330552

Targets

    • Target
      50de304cffc8136ad4710f12411bb8b9
    • Size 440KB
    • SHA256 9b83c1efc74833172375826612ca54ccf601b3b2bf24dab96b63da8a41dfbeb8
    • MD5 SHA1 SHA512
    Score
    6/10
    collection

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks