General
-
Target
fbcb9635de97b002df00f4dc9f725e6e.bin
-
Size
973KB
-
Sample
230323-cgpdwsch67
-
MD5
3f4d950d5f144bbb6fa6f8549b2907a7
-
SHA1
8bb241e8cb99e51dc48ed7105d18c3e08caaf178
-
SHA256
80e92929bcffbd65c1934ba7c6b5094ad9562385f553ddea29e527a2b1d7eda0
-
SHA512
76792b7f802be1d79bd682dbfd175166bd1fa7f6b0e9eedb122168ebbf11824e312231fdf274fb77982150305b7c0636bda00677778449eb7e54a6e088238ac1
-
SSDEEP
24576:yVHpPaCS0eKYdlRvZ98XDp4GlyZN6hXTc1FZhVlPVh:yVHpPa9/T8t4GlyLQcvTPv
Static task
static1
Behavioral task
behavioral1
Sample
QUOTATION _RFQ# 1043999.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
QUOTATION _RFQ# 1043999.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
blustealer
https://api.telegram.org/bot5797428905:AAGaRRXGZN1d9GGFd3sE5x4uSpCGF0PU4m4/sendMessage?chat_id=1251788325
Targets
-
-
Target
QUOTATION _RFQ# 1043999.exe
-
Size
1.1MB
-
MD5
e434e422d6bb9bc02f9a4be0b1c41d1b
-
SHA1
af7347b789fb43b26a83f4864e50eedf7f62095e
-
SHA256
c269b1931db163462343d0ecd8ef501e35e4da91c91f1464c8d526ef07a041bd
-
SHA512
72ffed26dfa5617a70852e88d8058d6adebcbd771bc3f0102f8fcf9bdddcac2264b37d07b5fd4790c177ad87f81fce0253ff9fc85c22f8034c066e66df657552
-
SSDEEP
24576:nVlj9vY9URDvRtWBQDtty/ziBgqMSAqzQYkYJrrzZL:nVB9g9YDptWuryduIA1L
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-