Overview

overview

10

Static

static

10

PWS.MSIL.S...GA.exe

windows7-x64

10

PWS.MSIL.S...GA.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PWS.MSIL.Stealgen.GA.MTB02559f0afdb12d5a44162d8c4aadfb89cf07c922cf19294c23590bc383ae1a94N

  • Size

    237KB

  • MD5

    95e3799df95c333eb5904813f864bda0

  • SHA1

    fe55c816b4e80f0765d9363181900cffab99d187

  • SHA256

    02559f0afdb12d5a44162d8c4aadfb89cf07c922cf19294c23590bc383ae1a94

  • SHA512

    841bb7f0156cfc055f7ea0f141e65ede00c1e917aeab719cb86b557f5145859e1e702d4b673b44aebf1a35c8c2af06f2d7fab1ff97d45f2b87c61fe13d87a5b1

  • SSDEEP

    3072:/J6IY+0lD4awMe9CHmmnWKe9iZd7UI2Lle4RbaE6cvFKJL+heI/Kh73WmqcSCJLD:BTY+0lNwOnyIv7UI242bL/kAlxO

Score
10/10
blackguard

Malware Config

Extracted

Family

blackguard

C2

https://api.telegram.org/bot6260248143:AAFGcO0NbgajE-Ec1Ns2AJpJeqgHc2w6xB8/sendMessage?chat_id=6495741315

Signatures

  • Blackguard family
    blackguard
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • PWS.MSIL.Stealgen.GA.MTB02559f0afdb12d5a44162d8c4aadfb89cf07c922cf19294c23590bc383ae1a94N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections