bluefox | 5e14e2582a02b6fe7cb28d6cad80bcddc51be2c01db097b0d292dfd575cb44a9

Resubmissions

24/11/2022, 16:54

221124-vejdzabe2y10

15/10/2022, 22:06

221015-1z69esgdh81

Sharing

Copy URL Twitter E-mail

General

Target
5e14e2582a02b6fe7cb28d6cad80bcddc51be2c01db097b0d292dfd575cb44a9
Size 166KB
Sample221124-vejdzabe2y
SHA256 5e14e2582a02b6fe7cb28d6cad80bcddc51be2c01db097b0d292dfd575cb44a9
MD5 ed83137f7e4ba4762017e031b1ce53d6
SHA1 e8d16eee11f23ac86910936704f4eee1880c8ba2
SHA512 9bf66c5f6250fafff6ba8f6aaa188778df4a2af511eaabcfddee6463e723ce74fd91a46909a518c03c40b0d86675d26257574a284c61747a66f966331a9d0886
SSDEEP 3072:Ma/AfqArwH63a8S51XcOO6afp7Ecnr/Fh7/OcbOW+xOTeePRW:Ma4SAr53p3Oqh7EcxJmcbOrC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

bluefox

Malware Config

Signatures

BlueFox Stealer payload 1 IoCs

resource	yara_rule
sample	family_bluefox

Bluefox family
bluefox

File Explorer

5e14e2582a02b6fe7cb28d6cad80bcddc51be2c01db097b0d292dfd575cb44a9

.exe 166KB

5e14e2582a02b6fe7cb28d6cad80bcddc51be2c01db097b0d292dfd575cb44a9

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5e14e2582a02b6fe7cb28d6cad80bcddc51be2c01db097b0d292dfd575cb44a9
MD5 ed83137f7e4ba4762017e031b1ce53d6
SHA1 e8d16eee11f23ac86910936704f4eee1880c8ba2
SHA512 9bf66c5f6250fafff6ba8f6aaa188778df4a2af511eaabcfddee6463e723ce74fd91a46909a518c03c40b0d86675d26257574a284c61747a66f966331a9d0886
SSDEEP 3072:Ma/AfqArwH63a8S51XcOO6afp7Ecnr/Fh7/OcbOW+xOTeePRW:Ma4SAr53p3Oqh7EcxJmcbOrC
MD5 SHA1 SHA512 SSDEEP

windows x86

BlueFox Stealer payload

Minor OS version

Major OS version

Entry point

175902

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths