Behavioral task
behavioral1
Sample
7b7714d0bba4aa994d27130165a99d74cf627469f14ad7ba25c51ea0a1e16699.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7b7714d0bba4aa994d27130165a99d74cf627469f14ad7ba25c51ea0a1e16699.exe
Resource
win10v2004-20221111-en
General
-
Target
7b7714d0bba4aa994d27130165a99d74cf627469f14ad7ba25c51ea0a1e16699
-
Size
167KB
-
MD5
0a6ba1b719583544ead13bed57f3812f
-
SHA1
59f85909128851474d0ac4bc28959e3d0a9d7a5f
-
SHA256
7b7714d0bba4aa994d27130165a99d74cf627469f14ad7ba25c51ea0a1e16699
-
SHA512
eeb349a010dc6feb79aa6cc513bed89190ed0afb8e36f47ba16d9f721e37b0d89e0376a978efc1e4318501de231e9b51975e56243997fa96badcb7da2c4c98d7
-
SSDEEP
3072:ee6jOoVPalSwu5jgQejU+mWrBBeTzuljBMvrb/3gDOseeqld:d6OkalSwnQejD00jBMvrb/VL
Malware Config
Signatures
-
BlueFox Stealer payload 1 IoCs
Processes:
resource yara_rule sample family_bluefox -
Bluefox family
Files
-
7b7714d0bba4aa994d27130165a99d74cf627469f14ad7ba25c51ea0a1e16699.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ