Overview

overview

10

Static

static

3

87fe613f5f...c7.exe

windows7-x64

10

87fe613f5f...c7.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    87fe613f5fca069882af2bdb9b53dec7

  • Size

    514KB

  • Sample

    240201-3w1nksbchq

  • MD5

    87fe613f5fca069882af2bdb9b53dec7

  • SHA1

    55c8121d2c2277f0899f55bd21b5afb531691f01

  • SHA256

    f3911bfcb357c543429f177fb376b93f673aec448e6deebef9e4991fc9baa21f

  • SHA512

    554017cf9629f4922bb3eff9d2775549fdf7df35a909e41403551a99d927f44a2bf2d67773c0a684c79e58006f9403740e1474ff650e71dfa2890e08169935d6

  • SSDEEP

    12288:cd2+5g27VGBVpVKrLVhrTLdamoA51sSzX4+pVgUwWRDO9G:cf5NEBVpsrLVhPLcmoA3s+x1uG

Score
10/10
blustealerstealer

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot1838876767:AAEiDKTcT_A4WBwpMo9nnrtBP7OvsmEUnNU/sendMessage?chat_id=1300181783

Targets

    • Target

      87fe613f5fca069882af2bdb9b53dec7

    • Size

      514KB

    • MD5

      87fe613f5fca069882af2bdb9b53dec7

    • SHA1

      55c8121d2c2277f0899f55bd21b5afb531691f01

    • SHA256

      f3911bfcb357c543429f177fb376b93f673aec448e6deebef9e4991fc9baa21f

    • SHA512

      554017cf9629f4922bb3eff9d2775549fdf7df35a909e41403551a99d927f44a2bf2d67773c0a684c79e58006f9403740e1474ff650e71dfa2890e08169935d6

    • SSDEEP

      12288:cd2+5g27VGBVpVKrLVhrTLdamoA51sSzX4+pVgUwWRDO9G:cf5NEBVpsrLVhPLcmoA3s+x1uG

    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks