Overview

overview

10

Static

static

Offer Request.exe

windows7-x64

10

Offer Request.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Offer Request.exe

  • Size

    901KB

  • Sample

    220829-gmfq6adge3

  • MD5

    795b1ccc977fe6edbb2e9b1d2c5d6759

  • SHA1

    d9a9dd8d825468d4155051dff9eccfc395b40a02

  • SHA256

    3402c28f8bb37b47cf2868b16ca9fd851f7004458a93c17802c04cf2064909eb

  • SHA512

    78c657b5f4604299728751e9967e50de9411a1c6409e2ddd72d3f103deed585d52a8c85f4fec146356b5e000d35b7c994cfd7e9bc2c9c1710a1f1ac4c583899a

  • SSDEEP

    24576:/7p4L8ggIzMcvCqpB2hhqle3KVLfBU9Cekog6:l4L8gR9Cqn2hhqleKL6i

Score
10/10
blustealercollectionstealer

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5450700540:AAEJyEEV8BKgYUKmnCPZxp19kD9GVSRup5M/sendMessage?chat_id=5422342474

Targets

    • Target

      Offer Request.exe

    • Size

      901KB

    • MD5

      795b1ccc977fe6edbb2e9b1d2c5d6759

    • SHA1

      d9a9dd8d825468d4155051dff9eccfc395b40a02

    • SHA256

      3402c28f8bb37b47cf2868b16ca9fd851f7004458a93c17802c04cf2064909eb

    • SHA512

      78c657b5f4604299728751e9967e50de9411a1c6409e2ddd72d3f103deed585d52a8c85f4fec146356b5e000d35b7c994cfd7e9bc2c9c1710a1f1ac4c583899a

    • SSDEEP

      24576:/7p4L8ggIzMcvCqpB2hhqle3KVLfBU9Cekog6:l4L8gR9Cqn2hhqleKL6i

    Score
    10/10
    blustealercollectionstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks