General

  • Target

    Technical specification.exe

  • Size

    1.2MB

  • Sample

    221006-rq24nshhcn

  • MD5

    31a29680b013c3d2928ada03074d0152

  • SHA1

    25f08eaca9a1ba6b07f169d4a8095b1306d6342a

  • SHA256

    42263e557ad50b22270aa78bc80360442bbb0475d12983e2bf760da7c3f6a3f6

  • SHA512

    bb79319aa3b0191458d246fa83d4b84a65786cbfe14c2ab399dd22fd9aec65d680eaed2b0d24d44a0e419e79a5fb9a831fe282ec3aef7f17e2a4b6c72cb0f0fd

  • SSDEEP

    24576:C74ve4hlhZ9JsMengztif/3uF5xOYZYaz0m:C4bvhiati33KTY20m

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5450700540:AAEJyEEV8BKgYUKmnCPZxp19kD9GVSRup5M/sendMessage?chat_id=5422342474

Targets

    • Target

      Technical specification.exe

    • Size

      1.2MB

    • MD5

      31a29680b013c3d2928ada03074d0152

    • SHA1

      25f08eaca9a1ba6b07f169d4a8095b1306d6342a

    • SHA256

      42263e557ad50b22270aa78bc80360442bbb0475d12983e2bf760da7c3f6a3f6

    • SHA512

      bb79319aa3b0191458d246fa83d4b84a65786cbfe14c2ab399dd22fd9aec65d680eaed2b0d24d44a0e419e79a5fb9a831fe282ec3aef7f17e2a4b6c72cb0f0fd

    • SSDEEP

      24576:C74ve4hlhZ9JsMengztif/3uF5xOYZYaz0m:C4bvhiati33KTY20m

    • BluStealer

      A Modular information stealer written in Visual Basic.

    • Accesses Microsoft Outlook profiles

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks