Analysis
-
max time kernel
146s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2023 02:22
Behavioral task
behavioral1
Sample
165f5b34f4e8852e5de2927b040490dc8afe3f54db14a78229442337f3c4f75d.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
165f5b34f4e8852e5de2927b040490dc8afe3f54db14a78229442337f3c4f75d.exe
Resource
win10v2004-20231127-en
General
-
Target
165f5b34f4e8852e5de2927b040490dc8afe3f54db14a78229442337f3c4f75d.exe
-
Size
25.9MB
-
MD5
df4aa86f65ef83492b145406c925d62b
-
SHA1
70e57e0623553eda4070e70de1b3008349911389
-
SHA256
165f5b34f4e8852e5de2927b040490dc8afe3f54db14a78229442337f3c4f75d
-
SHA512
6e758d16cf4aa6ce4929125f24acd6f66b9ec3f964d3d480aa1ad7026fc4d3d0bf1caa33cb13bff1d256c05127984c94167607e342833040129879c39d7c8de9
-
SSDEEP
196608:c0lp0icuzFW5uqg7mGPl7DF24H5Q6lHhyEASClv+eHdRu:c0lbyuDRDFWWyFAcdI
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Loads dropped DLL 1 IoCs
pid Process 4408 165f5b34f4e8852e5de2927b040490dc8afe3f54db14a78229442337f3c4f75d.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD5730e57d00a8699352cfb15ec1159afd0
SHA13ce30190d1f64dcb4572f0dd0efc065d58407dd9
SHA25629f4c07e9c5b265976967d8afe435b0e74bb6169c20090d856fbcc42a4bf48f0
SHA512b5bbc861884d4ce0a0846688d493f7a84b97076849ab81fdf3631a525dd99a12c7156a9d43b3019f91a912ab102669b651c5f6c2967142c29d2b41e76aefd3df