Overview

overview

10

Static

static

10

4460-141-0...ry.exe

windows7-x64

6

4460-141-0...ry.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4460-141-0x0000000000400000-0x000000000046E000-memory.dmp

  • Size

    440KB

  • Sample

    221207-aax2caaf8y

  • MD5

    494a605ec14a0bd14ad3db0eed037454

  • SHA1

    fe244e37cb29ba0c6b6a1744d91ec05a6194f726

  • SHA256

    a4b55247b3e10d05aad24505daa475ce6ec27682337857a6cf0031aacf2a155c

  • SHA512

    676d37e9600c3d54c77d59829f9825f653b15e8faddb681cf13d67a2dbb1ecb6e2f7b778e713d6de50f048e65f70c6febc780f6b22a02ec2e03ad250d94494e0

  • SSDEEP

    12288:BWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:exgsRftD0C2nKG

Score
10/10
blustealercollection

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5797428905:AAGaRRXGZN1d9GGFd3sE5x4uSpCGF0PU4m4/sendMessage?chat_id=1251788325

Targets

    • Target

      4460-141-0x0000000000400000-0x000000000046E000-memory.dmp

    • Size

      440KB

    • MD5

      494a605ec14a0bd14ad3db0eed037454

    • SHA1

      fe244e37cb29ba0c6b6a1744d91ec05a6194f726

    • SHA256

      a4b55247b3e10d05aad24505daa475ce6ec27682337857a6cf0031aacf2a155c

    • SHA512

      676d37e9600c3d54c77d59829f9825f653b15e8faddb681cf13d67a2dbb1ecb6e2f7b778e713d6de50f048e65f70c6febc780f6b22a02ec2e03ad250d94494e0

    • SSDEEP

      12288:BWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:exgsRftD0C2nKG

    Score
    6/10
    collection

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks