General
- Target Bloxstrap-v2.5.4.exe
- Size 137KB
- Sample241114-w63gla1mb1
- SHA256 ce51e9cfba7d93f33087420ef736d451e82073885c1e58a45047012a001ab05e
- MD5 71e8616b431c7caad0501f14aa1d5c4b
- SHA1 b9c1b78ac78b97cdce8785767772f87abd7518f7
- SHA512 67e0cabde42a8b666767d4d30f026871dbbd28fe9f5b757f3d6dbcab5b29a91a76c98e07b5cde7dc7cec6a61b283641db51a66a05aaf85b81ea8660a94b41715
- SSDEEP 3072:TXxaTJLTj48HOaa8Rlu3nrpse5oxxjPjMxQrQav:Vkuarlu3G9zPjMxQrQa
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
Bloxstrap-v2.5.4.exe
Resource
win10ltsc2021-20241023-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Bloxstrap-v2.5.4.exe
Resource
win11-20241007-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
phemedrone
C2
-
https://api.telegram.org/bot7763022627:AAHjwAW2eiTJ-zQ8x5sgBtZNkRv-nW0dp0o/sendDocument
Targets
-
- Target Bloxstrap-v2.5.4.exe
- Size 137KB
- SHA256 ce51e9cfba7d93f33087420ef736d451e82073885c1e58a45047012a001ab05e
- MD5 71e8616b431c7caad0501f14aa1d5c4b
- SHA1 b9c1b78ac78b97cdce8785767772f87abd7518f7
- SHA512 67e0cabde42a8b666767d4d30f026871dbbd28fe9f5b757f3d6dbcab5b29a91a76c98e07b5cde7dc7cec6a61b283641db51a66a05aaf85b81ea8660a94b41715
- SSDEEP 3072:TXxaTJLTj48HOaa8Rlu3nrpse5oxxjPjMxQrQav:Vkuarlu3G9zPjMxQrQa
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Phemedrone family