Overview

overview

10

Static

static

3

7f074da219...bc.exe

windows7-x64

10

7f074da219...bc.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f074da2194055199bec9996fcc382bc

  • Size

    498KB

  • Sample

    240129-gcy5rabcb3

  • MD5

    7f074da2194055199bec9996fcc382bc

  • SHA1

    a463f7184593956742f6c61d55b0f4db8df10b84

  • SHA256

    c22a98c5ef21699cf1b2e45b25cd04bbb44121078f2604820606e9455673735a

  • SHA512

    f1641d016b7afa10104f1b244b00a9b20c8589bb4186a97b471f3f62dcc8eaa48f438dc6dbda85457c8a1c6552b1e966a5ebbfc1d7b84722af54704196749a2c

  • SSDEEP

    12288:S2wyuuPGC/7X1yAP1egsPi183uT4BsPBTTjo1vorHF/:Zwq/7V1eVa1837Bs1TOorHF/

Score
10/10
blustealerstealer

Malware Config

Extracted

Family

blustealer

Credentials

  • Protocol:     smtp
  • Host:
    mail.dm-teh.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    Vm@(O;CO.vEQ

Targets

    • Target

      7f074da2194055199bec9996fcc382bc

    • Size

      498KB

    • MD5

      7f074da2194055199bec9996fcc382bc

    • SHA1

      a463f7184593956742f6c61d55b0f4db8df10b84

    • SHA256

      c22a98c5ef21699cf1b2e45b25cd04bbb44121078f2604820606e9455673735a

    • SHA512

      f1641d016b7afa10104f1b244b00a9b20c8589bb4186a97b471f3f62dcc8eaa48f438dc6dbda85457c8a1c6552b1e966a5ebbfc1d7b84722af54704196749a2c

    • SSDEEP

      12288:S2wyuuPGC/7X1yAP1egsPi183uT4BsPBTTjo1vorHF/:Zwq/7V1eVa1837Bs1TOorHF/

    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks