General
-
Target
Technical specification.exe
-
Size
1.2MB
-
Sample
221006-rq24nshhcn
-
MD5
31a29680b013c3d2928ada03074d0152
-
SHA1
25f08eaca9a1ba6b07f169d4a8095b1306d6342a
-
SHA256
42263e557ad50b22270aa78bc80360442bbb0475d12983e2bf760da7c3f6a3f6
-
SHA512
bb79319aa3b0191458d246fa83d4b84a65786cbfe14c2ab399dd22fd9aec65d680eaed2b0d24d44a0e419e79a5fb9a831fe282ec3aef7f17e2a4b6c72cb0f0fd
-
SSDEEP
24576:C74ve4hlhZ9JsMengztif/3uF5xOYZYaz0m:C4bvhiati33KTY20m
Static task
static1
Behavioral task
behavioral1
Sample
Technical specification.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Technical specification.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
blustealer
https://api.telegram.org/bot5450700540:AAEJyEEV8BKgYUKmnCPZxp19kD9GVSRup5M/sendMessage?chat_id=5422342474
Targets
-
-
Target
Technical specification.exe
-
Size
1.2MB
-
MD5
31a29680b013c3d2928ada03074d0152
-
SHA1
25f08eaca9a1ba6b07f169d4a8095b1306d6342a
-
SHA256
42263e557ad50b22270aa78bc80360442bbb0475d12983e2bf760da7c3f6a3f6
-
SHA512
bb79319aa3b0191458d246fa83d4b84a65786cbfe14c2ab399dd22fd9aec65d680eaed2b0d24d44a0e419e79a5fb9a831fe282ec3aef7f17e2a4b6c72cb0f0fd
-
SSDEEP
24576:C74ve4hlhZ9JsMengztif/3uF5xOYZYaz0m:C4bvhiati33KTY20m
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-