Overview

overview

10

Static

static

3

864c6461a4...18.exe

windows7-x64

10

864c6461a4...18.exe

windows10-2004-x64

7

$PLUGINSDI...az.dll

windows7-x64

10

$PLUGINSDI...az.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    864c6461a405628b69fb52e1cad9d845_JaffaCakes118

  • Size

    479KB

  • Sample

    240402-jbbn6sbe29

  • MD5

    864c6461a405628b69fb52e1cad9d845

  • SHA1

    bd92998beb96c5bbc013326b4e9f97aa71b0da07

  • SHA256

    33b266ec8faff2cef0a77d1c0ea818608764a2c2c0d8350911d50ab8266ab9dc

  • SHA512

    927cc76cb6c9d525e540ea3aec0606020dbf8bea309bd08cdf29adfc49a7e0c1043eb9dadef596b537b0322e37c395cf75433967e952a20d76d3683885c3bedf

  • SSDEEP

    12288:ysOZAy3/0P5tMqm3aCc+MWSk8xewTFSNgMliFl:Pyp/E5tMKCc+Mvk8xeWFSN3il

Score
10/10
blustealerstealer

Malware Config

Targets

    • Target

      864c6461a405628b69fb52e1cad9d845_JaffaCakes118

    • Size

      479KB

    • MD5

      864c6461a405628b69fb52e1cad9d845

    • SHA1

      bd92998beb96c5bbc013326b4e9f97aa71b0da07

    • SHA256

      33b266ec8faff2cef0a77d1c0ea818608764a2c2c0d8350911d50ab8266ab9dc

    • SHA512

      927cc76cb6c9d525e540ea3aec0606020dbf8bea309bd08cdf29adfc49a7e0c1043eb9dadef596b537b0322e37c395cf75433967e952a20d76d3683885c3bedf

    • SSDEEP

      12288:ysOZAy3/0P5tMqm3aCc+MWSk8xewTFSNgMliFl:Pyp/E5tMKCc+Mvk8xeWFSN3il

    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/olldmhffoaz.dll

    • Size

      22KB

    • MD5

      374e00e1b931d7e06c74d4ce9c9476a3

    • SHA1

      5f199903f9b64b10e218b4d98621f7c2b02b11d9

    • SHA256

      80f175c88444e4c1388bdc3560f9c44b9fb3a24861f20bbedab4b5dfd69d10ef

    • SHA512

      470793bc592c7ec78cc1dec91ebe48d6136c60d179512782b8b41532d372a8293c53913653931b3c74d1544fb038e1fc649cac745bd65310c1ffc88606350ad4

    • SSDEEP

      384:4nMclcY5oSkzLuF1L0hF2IQwAtTbGB1jMbo:4Mc+YSSkzLuFZkw9w+fGBZO

    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Suspicious use of SetThreadContext

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks