Overview

overview

10

Static

static

3

54fd4c25a6...e3.exe

windows7-x64

10

54fd4c25a6...e3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54fd4c25a6a9bfa5f54a6b77fb1a8de3

  • Size

    2.3MB

  • Sample

    240112-arz72acaf9

  • MD5

    54fd4c25a6a9bfa5f54a6b77fb1a8de3

  • SHA1

    3ef6347026b0269bffa572f41a0c8f666d5ab5c1

  • SHA256

    6b747506cd4c9f9807084784cc5c67b5b134258c059d8089c6406e3585db5275

  • SHA512

    34ad184a3bbbae4a6dc063b9d38cbd69156ea8eb5546344c8b7b05aa08053f06e7c322e28022f2712953497ae7f1d4564f7832a39e4176ab06be7113d7c6172e

  • SSDEEP

    24576:6K1ZYe0/8W5p9NIaP7jefuYXeT7IPulgxXN/odo:PB00kpgaPaDpPulgxO+

Score
10/10
blustealerstealer

Malware Config

Targets

    • Target

      54fd4c25a6a9bfa5f54a6b77fb1a8de3

    • Size

      2.3MB

    • MD5

      54fd4c25a6a9bfa5f54a6b77fb1a8de3

    • SHA1

      3ef6347026b0269bffa572f41a0c8f666d5ab5c1

    • SHA256

      6b747506cd4c9f9807084784cc5c67b5b134258c059d8089c6406e3585db5275

    • SHA512

      34ad184a3bbbae4a6dc063b9d38cbd69156ea8eb5546344c8b7b05aa08053f06e7c322e28022f2712953497ae7f1d4564f7832a39e4176ab06be7113d7c6172e

    • SSDEEP

      24576:6K1ZYe0/8W5p9NIaP7jefuYXeT7IPulgxXN/odo:PB00kpgaPaDpPulgxO+

    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks