General
- Target vsdbg.dll.exe
- Size 4.1MB
- Sample260811-vwp8vavsbs
- SHA256 cb7a54849c6d83a13097c90947454fdbfc04238d1b45e93d2981accdf7be40aa
- MD5 33bdf2f1c11690685a6c0011e15f5c83
- SHA1 e022b8c359ccf63d067ecc8e527d96729fc1f47e
- SHA512 152ddb68f8a272190b296c6a76e14d27d6a5af5db3a2cca33f775b051edd1d9c3606bf57a1d63f1787cd2a5545820218b8f0e0afe9f55d6fd2c8d11bf539b9ab
- SSDEEP 98304:CDqXuojwH/ivfeuIK9Hz5ZyDfom1waJ9gn8fhE0W0qkLAVWmyzefpq2sIoj0KFWX:CDqnwg2K9HzHyd1wmNy0bJLsWmyC/4jg
- TLSH T14816B08673C47ED9C446DD7A9714F23281A3A9338EB790CA9E97C70A4AB6D514F38F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vsdbg.dll
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
vsdbg.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
blakcsee_stealer
C2
-
2.26.126.50
Targets
-
- Target vsdbg.dll.exe
- Size 4.1MB
- SHA256 cb7a54849c6d83a13097c90947454fdbfc04238d1b45e93d2981accdf7be40aa
- MD5 33bdf2f1c11690685a6c0011e15f5c83
- SHA1 e022b8c359ccf63d067ecc8e527d96729fc1f47e
- SHA512 152ddb68f8a272190b296c6a76e14d27d6a5af5db3a2cca33f775b051edd1d9c3606bf57a1d63f1787cd2a5545820218b8f0e0afe9f55d6fd2c8d11bf539b9ab
- SSDEEP 98304:CDqXuojwH/ivfeuIK9Hz5ZyDfom1waJ9gn8fhE0W0qkLAVWmyzefpq2sIoj0KFWX:CDqnwg2K9HzHyd1wmNy0bJLsWmyC/4jg
- TLSH T14816B08673C47ED9C446DD7A9714F23281A3A9338EB790CA9E97C70A4AB6D514F38F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext