General
- Target 572-63-0x0000000000400000-0x0000000000654000-memory.dmp
- Size 2.3MB
- Sample240305-nb2b2sdd41
- SHA256 8d01f00f984c96474e860465f410397418ea7b5d07e74499491f8e8fb479c981
- MD5 5ae9122908237a6bb16e6e19e5615969
- SHA1 51a8b1f6e829761d8d0f0e8a7f3f93c6dfbaa63a
- SHA512 219957f36b576af7b0b2c506b84a3609c78ea1c87b7f0fb41d07441de56d3e584484231cbdf4653c78842821cfe9be080cdad84ce145503fc7f0ef48145f9a75
- SSDEEP 12288:uWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:9xgsRftD0C2nKG
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
572-63-0x0000000000400000-0x0000000000654000-memory.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
572-63-0x0000000000400000-0x0000000000654000-memory.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
blustealer
C2
-
https://api.telegram.org/bot5797428905:AAGaRRXGZN1d9GGFd3sE5x4uSpCGF0PU4m4/sendMessage?chat_id=1251788325
Targets
-
- Target 572-63-0x0000000000400000-0x0000000000654000-memory.dmp
- Size 2.3MB
- SHA256 8d01f00f984c96474e860465f410397418ea7b5d07e74499491f8e8fb479c981
- MD5 5ae9122908237a6bb16e6e19e5615969
- SHA1 51a8b1f6e829761d8d0f0e8a7f3f93c6dfbaa63a
- SHA512 219957f36b576af7b0b2c506b84a3609c78ea1c87b7f0fb41d07441de56d3e584484231cbdf4653c78842821cfe9be080cdad84ce145503fc7f0ef48145f9a75
- SSDEEP 12288:uWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:9xgsRftD0C2nKG
- MD5 SHA1 SHA512 SSDEEP
Score10/10