Overview

overview

10

Static

static

10

1364-56-0x...ry.exe

windows7-x64

10

1364-56-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1364-56-0x0000000000400000-0x0000000000AB0000-memory.dmp

  • Size

    6.7MB

  • Sample

    220802-w1pnjsbbaj

  • MD5

    1804a754530e5cdb5097d6771329daa7

  • SHA1

    0cbb6122a62807439c31706e8595dc603b980c63

  • SHA256

    083daf75a026aa712886682b7dd389050fbbfd539861835068b34e1e9df85ef7

  • SHA512

    f6747b8904564c99dd82f4376aee54093471f96bbb8ed3a30abb7b91d200da06fe105aa60703ea547f9f9fa9df740a7a2b060c74d9b7811e0949c338395b0307

Score
10/10
blustealerstealerthemida

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5449766717:AAHzRorvKI5URgvleGHlq6ZvqElY68-XL18/sendMessage?chat_id=1293496579

Targets

    • Target

      1364-56-0x0000000000400000-0x0000000000AB0000-memory.dmp

    • Size

      6.7MB

    • MD5

      1804a754530e5cdb5097d6771329daa7

    • SHA1

      0cbb6122a62807439c31706e8595dc603b980c63

    • SHA256

      083daf75a026aa712886682b7dd389050fbbfd539861835068b34e1e9df85ef7

    • SHA512

      f6747b8904564c99dd82f4376aee54093471f96bbb8ed3a30abb7b91d200da06fe105aa60703ea547f9f9fa9df740a7a2b060c74d9b7811e0949c338395b0307

    Score
    10/10
    blustealerstealerthemida

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks