General
- Target 1496-63-0x0000000000400000-0x0000000000654000-memory.dmp
- Size 2.3MB
- Sample240305-phfjlafc82
- SHA256 8d34a012165298f1e02dda3d83b863b3468b4ab5c7edda0f88765ccb3460a629
- MD5 1faabaa99cb79de147e601c8f8a67c1e
- SHA1 390f7270163e6a9ae26e7488606b42f00bf45af5
- SHA512 3db77ee481efab33c40c14d2039c58ab772ac152a8c6e72950c84a620f052e96808e80461fb47051945b3f6ffa4888263a743004405fc80dfdc76586f50613bf
- SSDEEP 12288:hWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:+xgsRftD0C2nKG
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
1496-63-0x0000000000400000-0x0000000000654000-memory.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1496-63-0x0000000000400000-0x0000000000654000-memory.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
blustealer
C2
-
https://api.telegram.org/bot5797428905:AAGaRRXGZN1d9GGFd3sE5x4uSpCGF0PU4m4/sendMessage?chat_id=1251788325
Targets
-
- Target 1496-63-0x0000000000400000-0x0000000000654000-memory.dmp
- Size 2.3MB
- SHA256 8d34a012165298f1e02dda3d83b863b3468b4ab5c7edda0f88765ccb3460a629
- MD5 1faabaa99cb79de147e601c8f8a67c1e
- SHA1 390f7270163e6a9ae26e7488606b42f00bf45af5
- SHA512 3db77ee481efab33c40c14d2039c58ab772ac152a8c6e72950c84a620f052e96808e80461fb47051945b3f6ffa4888263a743004405fc80dfdc76586f50613bf
- SSDEEP 12288:hWnxfgsRL4u/1AlLK6FRY2n8OPKxGvYmB:+xgsRftD0C2nKG
- MD5 SHA1 SHA512 SSDEEP
Score10/10