Analysis
-
max time kernel
144s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
20-04-2024 01:42
Behavioral task
behavioral1
Sample
09c9dde84008686794dc373b47dc21b0bb5cd170ad526ab58c3e07e358d27056.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09c9dde84008686794dc373b47dc21b0bb5cd170ad526ab58c3e07e358d27056.exe
Resource
win10v2004-20240412-en
General
-
Target
09c9dde84008686794dc373b47dc21b0bb5cd170ad526ab58c3e07e358d27056.exe
-
Size
14.9MB
-
MD5
9f058d1bb573fca63065bf1db24101fd
-
SHA1
5296af94a887f14eeb744a2d50d2eec124a91a46
-
SHA256
09c9dde84008686794dc373b47dc21b0bb5cd170ad526ab58c3e07e358d27056
-
SHA512
ecf850e2975a1a10d5d596c6862c91aa87554b5fa0b16bea95c8dfbac346d43df02bee21d60ca0767efbb11a14c51ce19c92dde48de12b0dfe1fe62813333548
-
SSDEEP
393216:cbSTuPHSky0WyNUHKoc8tQsvcsM+o4YkSbOTByWRK:KSTGbyx9Hpc8astK7OIU
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4600-0-0x0000000075060000-0x0000000075810000-memory.dmpFilesize
7.7MB
-
memory/4600-1-0x0000000000BF0000-0x0000000001AE4000-memory.dmpFilesize
15.0MB
-
memory/4600-2-0x0000000006B10000-0x00000000070B4000-memory.dmpFilesize
5.6MB
-
memory/4600-3-0x0000000006560000-0x00000000065F2000-memory.dmpFilesize
584KB
-
memory/4600-4-0x0000000006550000-0x0000000006560000-memory.dmpFilesize
64KB
-
memory/4600-5-0x00000000064F0000-0x00000000064FA000-memory.dmpFilesize
40KB
-
memory/4600-6-0x00000000099B0000-0x0000000009C8A000-memory.dmpFilesize
2.9MB
-
memory/4600-7-0x0000000006550000-0x0000000006560000-memory.dmpFilesize
64KB
-
memory/4600-8-0x000000000B0C0000-0x000000000B126000-memory.dmpFilesize
408KB
-
memory/4600-9-0x0000000075060000-0x0000000075810000-memory.dmpFilesize
7.7MB
-
memory/4600-10-0x0000000006550000-0x0000000006560000-memory.dmpFilesize
64KB
-
memory/4600-11-0x0000000006550000-0x0000000006560000-memory.dmpFilesize
64KB