General
- Target vsdbg.dll.exe
- Size 2.3MB
- Sample260804-x6bvbaff95
- SHA256 45880839303fe491b2676a37faaa1fe6192917b3e64de1d46858563f16518e2f
- MD5 edf5eeed72c207be16d9119f87b6a70c
- SHA1 4319a638252be2141e4878d709a60ac61168ccc2
- SHA512 248b4e03640a9b70ed2d313b0dd1e3d59e96a895b51d57de1ccecb93628b8f6dd66835223de496f241a46efbdb245216cadcd94f961d5b7b933f7114bcec6d3b
- SSDEEP 49152:BG4RmRcMlBRiFn8a8/S+pGUZRLoePOxDtlx14Svw+:csohpGUHPKDDUS
- TLSH T1FFB5DF29E3D912A8E567DA34CB626233D7B578160770E98F069DC2152F73ED0AB3B311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vsdbg.dll
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
vsdbg.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
blakcsee_stealer
C2
-
94.183.168.16
Targets
-
- Target vsdbg.dll.exe
- Size 2.3MB
- SHA256 45880839303fe491b2676a37faaa1fe6192917b3e64de1d46858563f16518e2f
- MD5 edf5eeed72c207be16d9119f87b6a70c
- SHA1 4319a638252be2141e4878d709a60ac61168ccc2
- SHA512 248b4e03640a9b70ed2d313b0dd1e3d59e96a895b51d57de1ccecb93628b8f6dd66835223de496f241a46efbdb245216cadcd94f961d5b7b933f7114bcec6d3b
- SSDEEP 49152:BG4RmRcMlBRiFn8a8/S+pGUZRLoePOxDtlx14Svw+:csohpGUHPKDDUS
- TLSH T1FFB5DF29E3D912A8E567DA34CB626233D7B578160770E98F069DC2152F73ED0AB3B311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext