Overview

overview

10

Static

static

3

b5632339a5...b8.exe

windows7-x64

10

b5632339a5...b8.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5632339a5359f451b6ad0d68b2e6cb8

  • Size

    865KB

  • Sample

    240305-w697fadg6s

  • MD5

    b5632339a5359f451b6ad0d68b2e6cb8

  • SHA1

    bb37229b4be212a96773fcfa152ef9edacd9b203

  • SHA256

    ad9d1d2c8db7cc0b400cd49555dc39d2c0c13fa74784f007f5177163bf480176

  • SHA512

    93d73f2853038ba479e6fac47a9ebb0a9ec22a465a3ecaf3f1d002e51d3cf0dd1cc19d5e08c8c1ab46a5594e0138dce5ea513a41dbcecb64fb84513bfcc22da0

  • SSDEEP

    24576:T9OTg+jR8EkHk9wZeDUJ5M5uClZXoVVmacP:kTgNE0ZiUJ5wZAVk

Score
10/10
blustealerstealer

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot1816395306:AAE3ZBLYV2L9aT9mL8itL9vr3RP6nOz_B1o/sendMessage?chat_id=1368673464

Targets

    • Target

      b5632339a5359f451b6ad0d68b2e6cb8

    • Size

      865KB

    • MD5

      b5632339a5359f451b6ad0d68b2e6cb8

    • SHA1

      bb37229b4be212a96773fcfa152ef9edacd9b203

    • SHA256

      ad9d1d2c8db7cc0b400cd49555dc39d2c0c13fa74784f007f5177163bf480176

    • SHA512

      93d73f2853038ba479e6fac47a9ebb0a9ec22a465a3ecaf3f1d002e51d3cf0dd1cc19d5e08c8c1ab46a5594e0138dce5ea513a41dbcecb64fb84513bfcc22da0

    • SSDEEP

      24576:T9OTg+jR8EkHk9wZeDUJ5M5uClZXoVVmacP:kTgNE0ZiUJ5wZAVk

    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks