Overview

overview

10

Static

static

3

vsdbg.dll

windows10-2004-x64

10

vsdbg.dll

windows11-ltsc_2024-x64

10

vsdbg.exe

windows10-2004-x64

10

vsdebugeng.dll

windows10-2004-x64

1

webservices.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    08092026_1447_08092026_Информационное письмо от 08.09.2026.rar
  • Size 2.4MB
  • Sample260908-r55hcastbs
  • SHA256 2b2d5f6be78c17cace9b2f51d1292fa7e43b14adadfe38e979133cc00a1a8b3c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
blakcsee_stealerdiscoverystealer

Malware Config

Extracted

Family

  • blakcsee_stealer

C2

  • 91.210.146.50

Targets

    • Target
      vsdbg.dll
    • Size 1.8MB
    • SHA256 385076aba1de782a88e1a561a54fade99c27a4e9db4072b49bca023260b62acb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryblakcsee_stealerstealer

    • Family: BlakcSeeStealer

      BlakcSeeStealer is a Windows stealer written in C++.

      stealerblakcsee_stealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2
    • Target
      vsdbg.exe
    • Size 22KB
    • SHA256 3be2a5198dc46686ac514b8c70ecb28a8aff4dd56d4d0c60f66ebf5518ec85c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryblakcsee_stealerstealer

    • Family: BlakcSeeStealer

      BlakcSeeStealer is a Windows stealer written in C++.

      stealerblakcsee_stealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery

    • Suspicious use of SetThreadContext

    behavioral3
    • Target
      vsdebugeng.dll
    • Size 3.6MB
    • SHA256 076b2a9dd101f99e031a641150da8d12b03591d85a234dfe339a344026c2e587
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral4
    • Target
      webservices.dll
    • Size 1.4MB
    • SHA256 8ec55086fbef306b38cf53be62166c70dc20ee3c46c6ef1afdbfb76805da2814
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5

MITRE ATT&CK Enterprise v16

Tasks