Overview

overview

10

Static

static

7.exe

windows10-2004-x64

10

Resubmissions

15-09-2022 18:03

220915-wnac4aheaj 10

13-09-2022 17:07

220913-vndvvagba2 10

12-09-2022 11:46

220912-nxcktaghfq 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7.exe

  • Size

    1.2MB

  • Sample

    220915-wnac4aheaj

  • MD5

    9525bd775591fc765660eeb64002741f

  • SHA1

    0cb836092ba969107916c7445c790876a61912a6

  • SHA256

    cd101d3d19d5e797d9a151c9c4dd1db497f8e4ec680a7fb99a69b6af36634445

  • SHA512

    4ecea438e61f1b5decde0218ccf38146fadbda35531fe8b79ddd5cd47014d185cff8c6d94e6f4e1aaa7478d12c20b2c9d392ccbfa642be97c1b272003bb3df10

  • SSDEEP

    24576:C5nVyP/M6tQ5Cr0qwvNIQFQdS6vK2NqM4:IVA/TtQclwvNICQpvK2NqF

Score
10/10
blustealercollectionstealer

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5450700540:AAEJyEEV8BKgYUKmnCPZxp19kD9GVSRup5M/sendMessage?chat_id=5422342474

Targets

    • Target

      7.exe

    • Size

      1.2MB

    • MD5

      9525bd775591fc765660eeb64002741f

    • SHA1

      0cb836092ba969107916c7445c790876a61912a6

    • SHA256

      cd101d3d19d5e797d9a151c9c4dd1db497f8e4ec680a7fb99a69b6af36634445

    • SHA512

      4ecea438e61f1b5decde0218ccf38146fadbda35531fe8b79ddd5cd47014d185cff8c6d94e6f4e1aaa7478d12c20b2c9d392ccbfa642be97c1b272003bb3df10

    • SSDEEP

      24576:C5nVyP/M6tQ5Cr0qwvNIQFQdS6vK2NqM4:IVA/TtQclwvNICQpvK2NqF

    Score
    10/10
    blustealercollectionstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks