General

  • Target

    e8c68954927883269ab561d217148fdf643b526cf7b8869c90ec177376086fe3

  • Size

    1.3MB

  • Sample

    220913-t4s42abhbj

  • MD5

    4dd8e80743fadc1b4be934092932f3a6

  • SHA1

    811b5d1a3bf8a898f8e75cf2e06431b8fa66d441

  • SHA256

    e8c68954927883269ab561d217148fdf643b526cf7b8869c90ec177376086fe3

  • SHA512

    f79052a12f1e30b5ed3d9497924fd1a7e05a38206a8beb175b128cdf7f2a7331b54cc5a9ebe93d18a5d73c72b7ba11942af10c38ed2868a0a89ac785bfc69675

  • SSDEEP

    24576:ptPjrUEaA/KOenctXOU0EOq711yRQ6sBBtUix4OghAbCUB:p5jrUEaAZeVZw7156sBAI/eAPB

Score
10/10

Malware Config

Extracted

Family

blustealer

Credentials

  • Protocol:
    smtp
  • Host:
    mail.juhun.shop
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    78-GtE8%Y2}@

Targets

    • Target

      e8c68954927883269ab561d217148fdf643b526cf7b8869c90ec177376086fe3

    • Size

      1.3MB

    • MD5

      4dd8e80743fadc1b4be934092932f3a6

    • SHA1

      811b5d1a3bf8a898f8e75cf2e06431b8fa66d441

    • SHA256

      e8c68954927883269ab561d217148fdf643b526cf7b8869c90ec177376086fe3

    • SHA512

      f79052a12f1e30b5ed3d9497924fd1a7e05a38206a8beb175b128cdf7f2a7331b54cc5a9ebe93d18a5d73c72b7ba11942af10c38ed2868a0a89ac785bfc69675

    • SSDEEP

      24576:ptPjrUEaA/KOenctXOU0EOq711yRQ6sBBtUix4OghAbCUB:p5jrUEaAZeVZw7156sBAI/eAPB

    Score
    10/10
    • BluStealer

      A Modular information stealer written in Visual Basic.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks