Overview

overview

10

Static

static

10

suspicious.exe

windows7-x64

10

suspicious.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    suspicious.zip

  • Size

    1.6MB

  • Sample

    230116-dfnlmsgc93

  • MD5

    cb8e6999d2f3f31669f62fc1b629aed8

  • SHA1

    b01e4f036aa25ae2ec9320e3efe37de7e97599a3

  • SHA256

    8103180d40cccad7d6a069b0860ace5ba8340047b8572519ea486ffdf8708b0d

  • SHA512

    2608e81969c00b2d2014b7c1ae6507f9ba4a623cea04474966cffcf2ff452a11cca084e4f5a3c28747bbcbd235740d10cbc94f1871c04f1b5178ee69d51a6b3f

  • SSDEEP

    49152:oQN5EZmy0LmUNv7Ym30XDMaUJEAav62L7ur8U5f:oQNbyxUZYmUDcAvmrv

Score
10/10
blackguardstealer

Malware Config

Extracted

Family

blackguard

C2

https://win.mirtonewbacker.com/

Targets

    • Target

      suspicious.exe

    • Size

      4.2MB

    • MD5

      bbb9de0f35d59374d7267f983a3f362b

    • SHA1

      0c4df9e1941b1f555b867b016148409b51f49f63

    • SHA256

      c98e24c174130bba4836e08d24170866aa7128d62d3e2b25f3bc8562fdc74a66

    • SHA512

      4f0138f6bc8c2c015bc37b2a8178bf0fa043af90e6d1a487f7f739486e16d53d0d3ba86d8d30a060d93a038f63bc6cad23531bba90ff3c3aa7c9fc76f2858097

    • SSDEEP

      49152:ghpEf4/4hyBYKMD+SNfXCwJtezvOd0HSC3souk1b36rH4cseBzjyxeb:ghpEwMD+SNfCWtwlcAxC

    Score
    10/10
    blackguardstealer
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks