blustealer | ab5ac9bfb40fe0f3580c6ab3bbadab22f435af987cb0303d0b5f3ad4f9aa908c | Triage

Sharing

General

Target

b682c6d6ce2db9c102b7b21a905f2e27.exe
Size

572KB
Sample

220809-tw3nhacghk
MD5

b682c6d6ce2db9c102b7b21a905f2e27
SHA1

94579bf2d9bdbb3b11109b02c6ed87d48192b80f
SHA256

ab5ac9bfb40fe0f3580c6ab3bbadab22f435af987cb0303d0b5f3ad4f9aa908c
SHA512

ece2b6a1502da626900586e8a00a5ad4d12632d31cbfcfd889e1dd0984f9cc5c37f6959a0bd6553ec16ea620680729737b124ee915a3ef088756f328dadb9c8d

Score

10^/10

blustealer spyware stealer

Malware Config

Targets

- Target
  
  b682c6d6ce2db9c102b7b21a905f2e27.exe
- Size
  
  572KB
- MD5
  
  b682c6d6ce2db9c102b7b21a905f2e27
- SHA1
  
  94579bf2d9bdbb3b11109b02c6ed87d48192b80f
- SHA256
  
  ab5ac9bfb40fe0f3580c6ab3bbadab22f435af987cb0303d0b5f3ad4f9aa908c
- SHA512
  
  ece2b6a1502da626900586e8a00a5ad4d12632d31cbfcfd889e1dd0984f9cc5c37f6959a0bd6553ec16ea620680729737b124ee915a3ef088756f328dadb9c8d
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2