General

  • Target

    1fd4f4c853506d7c826da1ff97789011981c3d41a4bed8d300cf32b3cb7afde8

  • Size

    428KB

  • MD5

    f77a40d5f587afc009cb42e780046460

  • SHA1

    ad58cf0b1abf1612789d390ce041688274dd7e69

  • SHA256

    1fd4f4c853506d7c826da1ff97789011981c3d41a4bed8d300cf32b3cb7afde8

  • SHA512

    9cbf43bf1c4d7f208e38b989c8bb61a9c2f1a746206f42b8df5882cb60ee3e240f5265ca584e4f3388d51c403d6089ad7b76546b9ee36611575d007fd5a2d0c6

  • SSDEEP

    12288:PWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:oxgsRftD0C2nKG

Score
10/10

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5450700540:AAEJyEEV8BKgYUKmnCPZxp19kD9GVSRup5M/sendMessage?chat_id=5422342474

Signatures

  • Blustealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fd4f4c853506d7c826da1ff97789011981c3d41a4bed8d300cf32b3cb7afde8
    .exe windows x86

    df8fbcbe90e1e305a660f0ac2aa4fae4


    Headers

    Imports

    Sections