Overview

overview

10

Static

static

Doc0627.exe

windows7-x64

10

Doc0627.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Doc0627.exe

  • Size

    866KB

  • Sample

    220802-jncf8scfa8

  • MD5

    1db4863326d564281893628c4ecbe87b

  • SHA1

    55dae7e5b29e7e8c8aaeeb748807408d7f8bc3f4

  • SHA256

    81cdbea7a809be0f353a0d72397fb91821650770e736f9bd68f4501be64572d3

  • SHA512

    9c4c82e67dcedd4d27c7bd1230700c310eb111cf4a73a19e0de301f82f779851a3be991a9b90c96128c764c84595a1f4d049b4c99b0ba326737ff7e44ddd0feb

Score
10/10
blustealerstealer

Malware Config

Targets

    • Target

      Doc0627.exe

    • Size

      866KB

    • MD5

      1db4863326d564281893628c4ecbe87b

    • SHA1

      55dae7e5b29e7e8c8aaeeb748807408d7f8bc3f4

    • SHA256

      81cdbea7a809be0f353a0d72397fb91821650770e736f9bd68f4501be64572d3

    • SHA512

      9c4c82e67dcedd4d27c7bd1230700c310eb111cf4a73a19e0de301f82f779851a3be991a9b90c96128c764c84595a1f4d049b4c99b0ba326737ff7e44ddd0feb

    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks