Extracted

• • Target
    Запрос от 20.07.2026 (1).rar
  • Size 3.7MB
  • SHA256 4059caf0b7cde8dd3b9d3178764d305ba91bdf44c7c9febd2ea7014f7fba279d
  • MD5 dde4c16a17b8cd9be7b128ad0a371e46
  • SHA1 3e77e4196085691a09ebb37c2b3f0d74799a83fc
  • SHA512 a26d589521d258d9eb6325d3643a568977d593f3d76fda392cce8c53dbeb309e10929d0c466a1b8a603fd2d42ae91c6787c2daf36385f18162fd9f8a1078c0e8
  • SSDEEP 98304:LJ5nwtOYaVP3vi1HGxCn0kbuUwDgKPGeWyOrcAk:LnmXaVP3viF0k6UOgKP3WyOrdk
  • TLSH
    T17F063326EF9C45E357DC86B22080351C739F782CD4EA98FBC0269A936C7D6CE4B18765
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryblakcsee_stealerstealer

  • Family: BlakcSeeStealer

    BlakcSeeStealer is a Windows stealer written in C++.

    stealerblakcsee_stealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2