blackguard | d55882f646582d9c3757ffd84438d597d56e0ae2de4a91c097a55625ddd08766 | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28-02-2024 01:34

Sharing

Report Analysis Logs

General

Target

d55882f646582d9c3757ffd84438d597d56e0ae2de4a91c097a55625ddd08766.exe
Size

11.0MB
MD5

91e82111113758ffa5aabcae948bbecc
SHA1

f68c10b3ab5219aedf65940743c6f093c2b28799
SHA256

d55882f646582d9c3757ffd84438d597d56e0ae2de4a91c097a55625ddd08766
SHA512

a70bec9ceb89541adf2afa6bd92cf811f1fe7393781770b923e32a81e3705be5acb7467fd451de5ec61c33527a431beef13decb31f50076c94f6093bea7a1a1a
SSDEEP

196608:+jhTswJC7r5tQYdX3oCcm4EXLquG+og56QYkSIABTFXORGIBWRLVwRQ:+NTk7r5tQsvcsM+o4YkSdOTByWR

Score

10^/10

blackguard stealer

Malware Config

Signatures

BlackGuard
Infostealer first seen in Late 2021.
stealer blackguard

C:\Users\Admin\AppData\Local\Temp\d55882f646582d9c3757ffd84438d597d56e0ae2de4a91c097a55625ddd08766.exe
"C:\Users\Admin\AppData\Local\Temp\d55882f646582d9c3757ffd84438d597d56e0ae2de4a91c097a55625ddd08766.exe"
1⤵
PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3048-0-0x0000000074B90000-0x000000007527E000-memory.dmp

Filesize
6.9MB

Download
memory/3048-1-0x0000000000250000-0x0000000000D54000-memory.dmp

Filesize
11.0MB

Download
memory/3048-2-0x0000000005370000-0x00000000053B0000-memory.dmp

Filesize
256KB

Download
memory/3048-3-0x0000000005370000-0x00000000053B0000-memory.dmp

Filesize
256KB

Download
memory/3048-4-0x0000000074B90000-0x000000007527E000-memory.dmp

Filesize
6.9MB

Download
memory/3048-5-0x0000000005370000-0x00000000053B0000-memory.dmp

Filesize
256KB

Download