General
- Target vsdbg.dll.exe
- Size 2.7MB
- Sample260723-h1stbatbrc
- SHA256 e87c28ea4cde41c36ff6016fd8f682f688db2f72b3af45525d787b38a4f65ee5
- MD5 8a3eea9f1ba7f1b64966d71d6c50fa84
- SHA1 f6662cc6c68106317bec4c4e9a868cd575d16249
- SHA512 3a57039340dfd9cf69a89ac8dc5385637dac0f44c9bcf3747f43cf26ccf24b5d3c0b94981ea390605fb31b663beb20be72a22adde6fcfbdc11e7aaf6a164161e
- SSDEEP 49152:9sc0n4qLPTkqVAPDMqAp/sP7zZvz7csf6tqidS1E6Fp:A/6vJvv76tdG
- TLSH T186D5D015E39901B8E567EB78CB569233DAB1B8460331E68F0689D7162F33ED09B7B311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vsdbg.dll
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
vsdbg.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
blakcsee_stealer
C2
-
37.77.150.162
Targets
-
- Target vsdbg.dll.exe
- Size 2.7MB
- SHA256 e87c28ea4cde41c36ff6016fd8f682f688db2f72b3af45525d787b38a4f65ee5
- MD5 8a3eea9f1ba7f1b64966d71d6c50fa84
- SHA1 f6662cc6c68106317bec4c4e9a868cd575d16249
- SHA512 3a57039340dfd9cf69a89ac8dc5385637dac0f44c9bcf3747f43cf26ccf24b5d3c0b94981ea390605fb31b663beb20be72a22adde6fcfbdc11e7aaf6a164161e
- SSDEEP 49152:9sc0n4qLPTkqVAPDMqAp/sP7zZvz7csf6tqidS1E6Fp:A/6vJvv76tdG
- TLSH T186D5D015E39901B8E567EB78CB569233DAB1B8460331E68F0689D7162F33ED09B7B311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext