Overview

overview

10

Static

static

1

blueberry_...VM.exe

windows7-x64

10

blueberry_...VM.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    blueberry_obfuscator-VM.exe

  • Size

    5.3MB

  • Sample

    230412-3hkefaga79

  • MD5

    bfe2c9a81002c0b3f51e80d28166f11c

  • SHA1

    49800d024d3773c4050f3ca5ac7bb79a2322334c

  • SHA256

    2b462a8fa08088d8a738b3e9fdad71b1655c44e5497c1cb212e514f536a780ab

  • SHA512

    3148ffbe478ac1294e61bb62688b8c938e4658df97abb1ce1271db50541b76e87d0f542e6660123db3520730de99914bd6ba44093e637e43a1436dbb06cc9db0

  • SSDEEP

    98304:28zYBgkTRCyjAM0bRKLIYh74b6iGeUwjDRQOOAxY4Yj89PXAAZbJPnyl258RjPsL:28zYBgkTRCyjAM0bRKLIYh74b6iGeUwd

Score
10/10
agentteslaelysiumstealerkeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      blueberry_obfuscator-VM.exe

    • Size

      5.3MB

    • MD5

      bfe2c9a81002c0b3f51e80d28166f11c

    • SHA1

      49800d024d3773c4050f3ca5ac7bb79a2322334c

    • SHA256

      2b462a8fa08088d8a738b3e9fdad71b1655c44e5497c1cb212e514f536a780ab

    • SHA512

      3148ffbe478ac1294e61bb62688b8c938e4658df97abb1ce1271db50541b76e87d0f542e6660123db3520730de99914bd6ba44093e637e43a1436dbb06cc9db0

    • SSDEEP

      98304:28zYBgkTRCyjAM0bRKLIYh74b6iGeUwjDRQOOAxY4Yj89PXAAZbJPnyl258RjPsL:28zYBgkTRCyjAM0bRKLIYh74b6iGeUwd

    Score
    10/10
    agentteslaelysiumstealerkeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • ElysiumStealer

      ElysiumStealer (previously known as ZeromaxStealer) is an info stealer that can steal login credentials for various accounts.

      stealerelysiumstealer

    • ElysiumStealer Support DLL

    • AgentTesla payload

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks