General

  • Target
    everything-software-windows-6.75.8.zip
  • Size 141.9MB
  • Sample260816-b3jvvsxcne
  • SHA256 3cdda1a9fb5c0eb1ba0c8d908de3f7d1cf58e27b6362f689f5a5ca74586b1fc0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      everything-software-windows-6.75.8.exe
    • Size 204KB
    • SHA256 c00ad5e215fc79c900363bd454a69ee33ef737709e26c1b0c51ea1264709a3e1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: BlakcSeeStealer

      BlakcSeeStealer is a Windows stealer written in C++.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks