General
-
Target
f4b8876d0421a1d904d6bba62ed2ea0e966b33527e19a87603ffc5e76dd98450
-
Size
440KB
-
Sample
220817-gs97ysbdhn
-
MD5
41d43bd130d961af9030daaec5e1d4a1
-
SHA1
bf3b957d6b9048e2a627aa49f3f6676c575fd1c0
-
SHA256
f4b8876d0421a1d904d6bba62ed2ea0e966b33527e19a87603ffc5e76dd98450
-
SHA512
bee98d39a9a25cbddb702e12d5ee2deb28bf0e160c5b3bc65015ccde5cfa73e08c7fdc661b880a51dc6e0051f6d5b3b4bfed020c4ee534834425e05c1a7aecc5
-
SSDEEP
12288:PWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:oxgsRftD0C2nKG
Behavioral task
behavioral1
Sample
f4b8876d0421a1d904d6bba62ed2ea0e966b33527e19a87603ffc5e76dd98450.exe
Resource
win10-20220812-en
Malware Config
Extracted
blustealer
https://api.telegram.org/bot5535376508:AAGIkj1WObA9laUkCoGdCF3fvIC_BvhvWso/sendMessage?chat_id=5379877658
Targets
-
-
Target
f4b8876d0421a1d904d6bba62ed2ea0e966b33527e19a87603ffc5e76dd98450
-
Size
440KB
-
MD5
41d43bd130d961af9030daaec5e1d4a1
-
SHA1
bf3b957d6b9048e2a627aa49f3f6676c575fd1c0
-
SHA256
f4b8876d0421a1d904d6bba62ed2ea0e966b33527e19a87603ffc5e76dd98450
-
SHA512
bee98d39a9a25cbddb702e12d5ee2deb28bf0e160c5b3bc65015ccde5cfa73e08c7fdc661b880a51dc6e0051f6d5b3b4bfed020c4ee534834425e05c1a7aecc5
-
SSDEEP
12288:PWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:oxgsRftD0C2nKG
Score6/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-