Overview

overview

10

Static

static

10

4968-139-0...ry.exe

windows7-x64

6

4968-139-0...ry.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4968-139-0x0000000000400000-0x000000000046E000-memory.dmp

  • Size

    440KB

  • Sample

    221013-ql6evsfcdr

  • MD5

    01b2943dbcbdf1e1acd323cca6a5498a

  • SHA1

    ead525d7bdb4c8c315e4c5d3b0f2580e0648aa96

  • SHA256

    a28d2e63b09f39bbb8c10b5f3d5822bb4766f41051c9a3994eb34390b9e8622a

  • SHA512

    2235381eb827e85e2a29baecbb4912e8940329d2b3d04892233258dc8901d9527740e0fda8730bdd9956b0cb8a034aee77b38690832b7058fe62254ecab6d08e

  • SSDEEP

    12288:HWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:QxgsRftD0C2nKG

Score
10/10
blustealercollection

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5450700540:AAEJyEEV8BKgYUKmnCPZxp19kD9GVSRup5M/sendMessage?chat_id=5422342474

Targets

    • Target

      4968-139-0x0000000000400000-0x000000000046E000-memory.dmp

    • Size

      440KB

    • MD5

      01b2943dbcbdf1e1acd323cca6a5498a

    • SHA1

      ead525d7bdb4c8c315e4c5d3b0f2580e0648aa96

    • SHA256

      a28d2e63b09f39bbb8c10b5f3d5822bb4766f41051c9a3994eb34390b9e8622a

    • SHA512

      2235381eb827e85e2a29baecbb4912e8940329d2b3d04892233258dc8901d9527740e0fda8730bdd9956b0cb8a034aee77b38690832b7058fe62254ecab6d08e

    • SSDEEP

      12288:HWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:QxgsRftD0C2nKG

    Score
    6/10
    collection

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks