Overview
overview
10Static
static
10BlueOne Ra....1.rar
windows10-2004-x64
1BlueOne Ra....1.rar
windows11-ltsc_2024-x64
1BlueOne Ra...ed.exe
windows10-2004-x64
1BlueOne Ra...ed.exe
windows11-ltsc_2024-x64
1BlueOne Ra...ts.dll
windows10-2004-x64
1BlueOne Ra...ts.dll
windows11-ltsc_2024-x64
1BlueOne Ra...on.dll
windows10-2004-x64
1BlueOne Ra...on.dll
windows11-ltsc_2024-x64
8BlueOne Ra...ne.p12
windows10-2004-x64
1BlueOne Ra...ne.p12
windows11-ltsc_2024-x64
1BlueOne Ra...to.dll
windows10-2004-x64
1BlueOne Ra...to.dll
windows11-ltsc_2024-x64
1BlueOne Ra...lt.exe
windows10-2004-x64
10BlueOne Ra...lt.exe
windows11-ltsc_2024-x64
10BlueOne Ra...ok.dll
windows10-2004-x64
1BlueOne Ra...ok.dll
windows11-ltsc_2024-x64
1BlueOne Ra...I2.dll
windows10-2004-x64
1BlueOne Ra...I2.dll
windows11-ltsc_2024-x64
8BlueOne Ra...db.dll
windows10-2004-x64
1BlueOne Ra...db.dll
windows11-ltsc_2024-x64
1BlueOne Ra...db.dll
windows10-2004-x64
1BlueOne Ra...db.dll
windows11-ltsc_2024-x64
1BlueOne Ra...ks.dll
windows10-2004-x64
1BlueOne Ra...ks.dll
windows11-ltsc_2024-x64
1BlueOne Ra...il.dll
windows10-2004-x64
1BlueOne Ra...il.dll
windows11-ltsc_2024-x64
1BlueOne Ra...on.dll
windows10-2004-x64
1BlueOne Ra...on.dll
windows11-ltsc_2024-x64
1BlueOne Ra...at.dll
windows10-2004-x64
1BlueOne Ra...at.dll
windows11-ltsc_2024-x64
1BlueOne Ra...lt.xml
windows10-2004-x64
3BlueOne Ra...lt.xml
windows11-ltsc_2024-x64
1Analysis
- max time kernel
48s - max time network
32s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/07/2026, 15:56
Behavioral task
behavioral1
Sample
BlueOne Rat v1.0.1.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
BlueOne Rat v1.0.1.rar
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
BlueOne Rat v1.0.1/BlueOne Rat v1.0.1_Unpacked.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
BlueOne Rat v1.0.1/BlueOne Rat v1.0.1_Unpacked.exe
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
BlueOne Rat v1.0.1/BlueOne.Common.Tests.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
BlueOne Rat v1.0.1/BlueOne.Common.Tests.dll
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
BlueOne Rat v1.0.1/BlueOne.Common.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
BlueOne Rat v1.0.1/BlueOne.Common.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
BlueOne Rat v1.0.1/BlueOne.p12
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
BlueOne Rat v1.0.1/BlueOne.p12
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
BlueOne Rat v1.0.1/BouncyCastle.Crypto.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
BlueOne Rat v1.0.1/BouncyCastle.Crypto.dll
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
BlueOne Rat v1.0.1/Crypt-built.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
BlueOne Rat v1.0.1/Crypt-built.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
BlueOne Rat v1.0.1/Gma.System.MouseKeyHook.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
BlueOne Rat v1.0.1/Gma.System.MouseKeyHook.dll
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
BlueOne Rat v1.0.1/Guna.UI2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
BlueOne Rat v1.0.1/Guna.UI2.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
BlueOne Rat v1.0.1/Mono.Cecil.Mdb.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
BlueOne Rat v1.0.1/Mono.Cecil.Mdb.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
BlueOne Rat v1.0.1/Mono.Cecil.Pdb.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
BlueOne Rat v1.0.1/Mono.Cecil.Pdb.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
BlueOne Rat v1.0.1/Mono.Cecil.Rocks.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
BlueOne Rat v1.0.1/Mono.Cecil.Rocks.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
BlueOne Rat v1.0.1/Mono.Cecil.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
BlueOne Rat v1.0.1/Mono.Cecil.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
BlueOne Rat v1.0.1/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
BlueOne Rat v1.0.1/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
BlueOne Rat v1.0.1/Open.Nat.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
BlueOne Rat v1.0.1/Open.Nat.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
BlueOne Rat v1.0.1/Profiles/Default.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
BlueOne Rat v1.0.1/Profiles/Default.xml
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
General
- Target BlueOne Rat v1.0.1.rar
- Size 6.1MB
- Sample260701-tdf2sabv8v
- SHA256 05a360c1e2642545781594dd23b04abe5cf69eef914e057de51eb67d9f42b7aa
- MD5 8607ac6a2df4ccd9b7008758861ccd92
- SHA1 e838d314516f95856fdde26396981afb2604b2de
- SHA512 0c61252370af81cbde6b39fcebb25485172b26176f4b6b947a64f0ce2b164e291ac2117761dadd3ed186958753ec999c61bf37151ce1a02422ac8d74e5ded1f9
- SSDEEP 196608:ziAanfpVeqgrkpMbmQinYgvGEUpSlMb6hG:iVPokpqmrnZy7
- TLSH T13F5633BC89D5D23E1D03854B0E9962F44B6339378BC6384232E3D235AD2B56DE95923F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4164 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4164 7zFM.exe Token: 35 4164 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4164 7zFM.exe