Overview

overview

10

Static

static

1

PMI 22-8143_pdf.exe

windows7-x64

10

PMI 22-8143_pdf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PMI 22-8143_pdf.exe

  • Size

    881KB

  • Sample

    230420-h4xxfagc44

  • MD5

    61b7350c1d830391036bdf7ac96e7fef

  • SHA1

    585c6f1f8c37b82154188733e97e3e1111f214fb

  • SHA256

    c37e211564b4d5b3447fd8be8526724a4193ac8d9a99efddc3d599f7b5e6af51

  • SHA512

    6408cbcc79e47110b5522af699a4eb2411c8dfdfd8db64cfe2c5c6a3eb200308d0dc55c9019192a191553c65c7ca3e33d46b6eae98cf667489b1d3b810295281

  • SSDEEP

    24576:YDB9nM8vHaTmly301VMB6PWslKEW7SsvuXe:YVytKA3mEiWBjzvuX

Score
10/10
blustealercollectionstealer

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5450700540:AAEJyEEV8BKgYUKmnCPZxp19kD9GVSRup5M/sendMessage?chat_id=5422342474

Targets

    • Target

      PMI 22-8143_pdf.exe

    • Size

      881KB

    • MD5

      61b7350c1d830391036bdf7ac96e7fef

    • SHA1

      585c6f1f8c37b82154188733e97e3e1111f214fb

    • SHA256

      c37e211564b4d5b3447fd8be8526724a4193ac8d9a99efddc3d599f7b5e6af51

    • SHA512

      6408cbcc79e47110b5522af699a4eb2411c8dfdfd8db64cfe2c5c6a3eb200308d0dc55c9019192a191553c65c7ca3e33d46b6eae98cf667489b1d3b810295281

    • SSDEEP

      24576:YDB9nM8vHaTmly301VMB6PWslKEW7SsvuXe:YVytKA3mEiWBjzvuX

    Score
    10/10
    blustealercollectionstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks