Overview
overview
8Static
static
BlueSoleil...ER.exe
windows7-x64
BlueSoleil...ER.exe
windows10-2004-x64
BlueSoleil...UI.dll
windows7-x64
1BlueSoleil...UI.dll
windows10-2004-x64
3BlueSoleil...ui.dll
windows7-x64
1BlueSoleil...ui.dll
windows10-2004-x64
1BlueSoleil...ER.exe
windows7-x64
BlueSoleil...ER.exe
windows10-2004-x64
BlueSoleil...ud.dll
windows7-x64
1BlueSoleil...ud.dll
windows10-2004-x64
1BlueSoleil...ud.dll
windows7-x64
1BlueSoleil...ud.dll
windows10-2004-x64
1BlueSoleil...ay.exe
windows7-x64
1BlueSoleil...ay.exe
windows10-2004-x64
1BlueSoleil...2k.exe
windows7-x64
BlueSoleil...2k.exe
windows10-2004-x64
BlueSoleil...2k.dll
windows7-x64
1BlueSoleil...2k.dll
windows10-2004-x64
3BlueSoleil...2k.exe
windows7-x64
BlueSoleil...2k.exe
windows10-2004-x64
BlueSoleil...1f.dll
windows7-x64
1BlueSoleil...1f.dll
windows10-2004-x64
1BlueSoleil...up.exe
windows7-x64
8BlueSoleil...up.exe
windows10-2004-x64
8BlueSoleil...il.chm
windows7-x64
1BlueSoleil...il.chm
windows10-2004-x64
1BlueSoleil...fg.dll
windows7-x64
1BlueSoleil...fg.dll
windows10-2004-x64
1BlueSoleil...es.dll
windows7-x64
1BlueSoleil...es.dll
windows10-2004-x64
1BlueSoleil...fg.dll
windows7-x64
1BlueSoleil...fg.dll
windows10-2004-x64
3Analysis
-
max time kernel
90s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03-01-2023 22:38
Static task
static1
Behavioral task
behavioral1
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/OXSER.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/OXSER.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/OXUI.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/OXUI.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/Oxserui.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
BlueSoleil 1.6.1.1 official release/AmbiCom/Oxserui.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/OXSER.exe
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/OXSER.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCBaud.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCBaud.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCBaud.dll
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCBaud.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCTray.exe
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SCTray.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/Sio9502k.exe
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/Sio9502k.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SioUi2k.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SioUi2k.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral19
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SktBt2k.exe
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SktBt2k.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/wssbtr1f.dll
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/wssbtr1f.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
BlueSoleil 1.6.1.1 official release/Setup.exe
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
BlueSoleil 1.6.1.1 official release/Setup.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
BlueSoleil 1.6.1.1 official release/bluesoleil.chm
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
BlueSoleil 1.6.1.1 official release/bluesoleil.chm
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
BlueSoleil 1.6.1.1 official release/language/0006-Danish/btpcfg.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
BlueSoleil 1.6.1.1 official release/language/0006-Danish/btpcfg.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
BlueSoleil 1.6.1.1 official release/language/0006-Danish/btpres.dll
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
BlueSoleil 1.6.1.1 official release/language/0006-Danish/btpres.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
BlueSoleil 1.6.1.1 official release/language/0007-German/btpcfg.dll
Resource
win7-20220901-en
Behavioral task
behavioral32
Sample
BlueSoleil 1.6.1.1 official release/language/0007-German/btpcfg.dll
Resource
win10v2004-20221111-en
General
-
Target
BlueSoleil 1.6.1.1 official release/bluesoleil.chm
-
Size
943KB
-
MD5
b8105bcb1ce78eb59abe8001b0de8cef
-
SHA1
7f35f20b484f27ed4f857c1f704e67f993754482
-
SHA256
6aeeac2469f3dac1af2e73996d448fb861739d38ad16dc3a941553fc3e501840
-
SHA512
aafe38d8c19d8e25a6bc8e34c3e1327f66185a871671165003001256574f4b9aa5ecc65fc4a93f2e262c2ff7d703e61b3ec8dbbb1a6f35fe0c6c0692825fd411
-
SSDEEP
24576:YtOUnK26L8krXv+7Rtq1y0eAs8iJgWfei7NfEiY7N4:YQLL8krX270leH/Gk9eS
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3740 hh.exe 3740 hh.exe