Overview

overview

10

Static

static

e552183d16...fc.exe

windows7_x64

10

e552183d16...fc.exe

windows10-2004_x64

10

Resubmissions

14/07/2022, 08:00

220714-jv45tsdfdl10

15/09/2021, 22:04

210915-1yxzcsbcf28

Sharing

Copy URL Twitter E-mail

General

  • Target
    e552183d16e0d6629c88a4a163d266fc
  • Size 744KB
  • Sample220714-jv45tsdfdl
  • SHA256 de7e8838d1448ac79810b71d637b62165d32cb1932c211e1ea571bd4770b0cea
  • MD5 SHA1 SHA512
Score
10/10
blustealerstealer

Malware Config

Extracted

Family

  • blustealer

Credentials

Targets

    • Target
      e552183d16e0d6629c88a4a163d266fc
    • Size 744KB
    • SHA256 de7e8838d1448ac79810b71d637b62165d32cb1932c211e1ea571bd4770b0cea
    • MD5 SHA1 SHA512
    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks