General
- Target a79e9aff885b5aa305517c3836d10be1.exe
- Size 440KB
- Sample220909-bmtp5adcek
- SHA256 1c5bf7e3edbccd4fe44d97baba8529438169f346769e109b2b660d1b45b2a02b
- MD5 a79e9aff885b5aa305517c3836d10be1
- SHA1 a71d4faf5b3d863144d361129c4f52b6e66de27d
- SHA512 d8d7f5ed21a3c76c6ffa430f44f964d76529fb31c6eb4a838b5b74265a5c989d239111b530fb3673358ef70fc0a51e6adb0630dca0fbfe72a66b9802d2d9fd4f
- SSDEEP 12288:d8WnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:dnxgsRftD0C2nKG
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
a79e9aff885b5aa305517c3836d10be1.exe
Resource
win7-20220812-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
a79e9aff885b5aa305517c3836d10be1.exe
Resource
win10v2004-20220812-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
blustealer
C2
-
https://api.telegram.org/bot5535376508:AAGIkj1WObA9laUkCoGdCF3fvIC_BvhvWso/sendMessage?chat_id=5379877658
Targets
-
- Target a79e9aff885b5aa305517c3836d10be1.exe
- Size 440KB
- SHA256 1c5bf7e3edbccd4fe44d97baba8529438169f346769e109b2b660d1b45b2a02b
- MD5 a79e9aff885b5aa305517c3836d10be1
- SHA1 a71d4faf5b3d863144d361129c4f52b6e66de27d
- SHA512 d8d7f5ed21a3c76c6ffa430f44f964d76529fb31c6eb4a838b5b74265a5c989d239111b530fb3673358ef70fc0a51e6adb0630dca0fbfe72a66b9802d2d9fd4f
- SSDEEP 12288:d8WnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:dnxgsRftD0C2nKG
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext