Overview

overview

10

Static

static

3

e4b3a32bd8...18.exe

windows7-x64

10

e4b3a32bd8...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    e4b3a32bd8e0d3bfe3e9ce61cac71371_JaffaCakes118
  • Size 799KB
  • Sample240407-mehtfaaf4v
  • SHA256 eda2fc4d3eab34d348d29a72354a51726080f18ce1c1a7a425596ff182a53ecb
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
blustealerstealer

Malware Config

Extracted

Family

  • blustealer

C2

  • https://api.telegram.org/bot1816395306:AAE3ZBLYV2L9aT9mL8itL9vr3RP6nOz_B1o/sendMessage?chat_id=1368673464

Targets

    • Target
      e4b3a32bd8e0d3bfe3e9ce61cac71371_JaffaCakes118
    • Size 799KB
    • SHA256 eda2fc4d3eab34d348d29a72354a51726080f18ce1c1a7a425596ff182a53ecb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks