Overview

overview

10

Static

static

3

2cbd480f89...32.exe

windows7-x64

10

2cbd480f89...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cbd480f89e26794245eb6d36ce42c32

  • Size

    2.6MB

  • Sample

    231231-hxk93aegd3

  • MD5

    2cbd480f89e26794245eb6d36ce42c32

  • SHA1

    d05f560b7575da7eab154dab0014bb08524b1cb0

  • SHA256

    6aafc2be0c7d2804b40ef5b93b6ee12e2a0d8b9c3cc85c25b389fcb14c8fadd8

  • SHA512

    3124499db60c9dee74cee0a74a6ff3b43d5b39905bfaa73b68ab987816cbf4515cef3c52cef0d35ef958bf0d40cdc2322f1bd292712473a6058b33d79e7c809a

  • SSDEEP

    24576:2nGarbkryQZ5jXW3QGY+IEFjKJzdFUcJhWfQCvv/FJe3D:KXWpFUyh+QCvn+

Score
10/10
blustealerzgratratstealer

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot1949235546:AAFJ8hWHynuHinrzOjcAE-TQlS6bYGcf8J8/sendMessage?chat_id=1947722068

Targets

    • Target

      2cbd480f89e26794245eb6d36ce42c32

    • Size

      2.6MB

    • MD5

      2cbd480f89e26794245eb6d36ce42c32

    • SHA1

      d05f560b7575da7eab154dab0014bb08524b1cb0

    • SHA256

      6aafc2be0c7d2804b40ef5b93b6ee12e2a0d8b9c3cc85c25b389fcb14c8fadd8

    • SHA512

      3124499db60c9dee74cee0a74a6ff3b43d5b39905bfaa73b68ab987816cbf4515cef3c52cef0d35ef958bf0d40cdc2322f1bd292712473a6058b33d79e7c809a

    • SSDEEP

      24576:2nGarbkryQZ5jXW3QGY+IEFjKJzdFUcJhWfQCvv/FJe3D:KXWpFUyh+QCvn+

    Score
    10/10
    blustealerzgratratstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks