Overview

overview

10

Static

static

3

5b99e078a9...18.exe

windows7-x64

10

5b99e078a9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b99e078a95f02617911e2403177a8dd_JaffaCakes118

  • Size

    963KB

  • Sample

    240331-xs4m6she4v

  • MD5

    5b99e078a95f02617911e2403177a8dd

  • SHA1

    d9c1cbbd8d3b49c0af18b754e3a217689cf828fb

  • SHA256

    9f42a87633b7a40b8ce90e2d156d2c98fa9ebf7946e3af454fddc82aaf259c91

  • SHA512

    a4c5fc7789c8bc7ba16b48ffc5a9d6f761d165bcaacf6f3b654f5f22be22850fe955d9ac228107f73bc2a720d115851173f0b2a307ba753ccfb346091862f11f

  • SSDEEP

    12288:yAeoSjd75My5rWpiBvy29xzqk5rm97D5BWKjQJj+UXxeLNdU:yhddBqwxJdm97D5rjQJj+cxydU

Score
10/10
blustealerstealer

Malware Config

Targets

    • Target

      5b99e078a95f02617911e2403177a8dd_JaffaCakes118

    • Size

      963KB

    • MD5

      5b99e078a95f02617911e2403177a8dd

    • SHA1

      d9c1cbbd8d3b49c0af18b754e3a217689cf828fb

    • SHA256

      9f42a87633b7a40b8ce90e2d156d2c98fa9ebf7946e3af454fddc82aaf259c91

    • SHA512

      a4c5fc7789c8bc7ba16b48ffc5a9d6f761d165bcaacf6f3b654f5f22be22850fe955d9ac228107f73bc2a720d115851173f0b2a307ba753ccfb346091862f11f

    • SSDEEP

      12288:yAeoSjd75My5rWpiBvy29xzqk5rm97D5BWKjQJj+UXxeLNdU:yhddBqwxJdm97D5rjQJj+cxydU

    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks