General
- Target vsdbg.dll.exe
- Size 27.0MB
- Sample260819-awhhsavyfv
- SHA256 be21ec6879ddc9457fb48e2da6fe49a4208ded546205b3a161c358dcb016e38f
- MD5 036259e69237fb1d81f8f741a720db99
- SHA1 4db30b3e8128d8262c7d9401d53b46f9e39e849d
- SHA512 99ef5f1c6ece2e53f13d8481d4c19f9114a0fc430b21b550241c15afb183a48d6c5afc371c9973f28927e5133603d2c65d473f2354d921d47f951b59f457ed2d
- SSDEEP 393216:AydtckjjXfD1ae7UIHQ0pt9Ni9qI19kxIGElTvOZHfostIk14kVkeG2vxZETfK8:pHQuhWt18IGOaZ/os+kVFG+sC
- TLSH T18957BF18A3E40465E86BEB38C661D733DAB1BC665636C20F0969F6460F73E508F6F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vsdbg.dll
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
vsdbg.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
blakcsee_stealer
C2
-
2.26.126.50
Targets
-
- Target vsdbg.dll.exe
- Size 27.0MB
- SHA256 be21ec6879ddc9457fb48e2da6fe49a4208ded546205b3a161c358dcb016e38f
- MD5 036259e69237fb1d81f8f741a720db99
- SHA1 4db30b3e8128d8262c7d9401d53b46f9e39e849d
- SHA512 99ef5f1c6ece2e53f13d8481d4c19f9114a0fc430b21b550241c15afb183a48d6c5afc371c9973f28927e5133603d2c65d473f2354d921d47f951b59f457ed2d
- SSDEEP 393216:AydtckjjXfD1ae7UIHQ0pt9Ni9qI19kxIGElTvOZHfostIk14kVkeG2vxZETfK8:pHQuhWt18IGOaZ/os+kVFG+sC
- TLSH T18957BF18A3E40465E86BEB38C661D733DAB1BC665636C20F0969F6460F73E508F6F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext