blakcsee_stealer | d5a6f8a6e20fbb93b9eadbbda03e8143c47dfe1729b4271d7065dd0d9e2ffe73

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 18:28

Target
presa/vsdbg.dll
Size 2.5MB
Sample260930-w4vc7sfb84
SHA256 d5a6f8a6e20fbb93b9eadbbda03e8143c47dfe1729b4271d7065dd0d9e2ffe73
MD5 2902eacc267b618b4c6d24891b8e71d4
SHA1 2bedfbe4b55bef4241071d2baac3e9d95deea144
SHA512 576cdf2386b8e63eb0733529e031e1af209e53c6f2c581f919f974029fc3f6320c7c7d2425fcad12817e198e679f6d6e24d378dcabcaf8a2abd5ace8318ee742
SSDEEP 49152:SgjVcvGf2egLHix2Yjd099dVt1LIPDHmj0cg3CbBSZ+V:siz2Yo9pmbGjc3a
TLSH
T179C5DF15E3D811A4D97BD734CA61A332DAB078565732E2CB0A89D7452F33AE19B3F312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Family: BlakcSeeStealer
BlakcSeeStealer is a Windows stealer written in C++.
stealer blakcsee_stealer

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 124 set thread context of 1280	124	rundll32.exe	88

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 124 wrote to memory of 1280	124	rundll32.exe	88
PID 124 wrote to memory of 1280	124	rundll32.exe	88
PID 124 wrote to memory of 1280	124	rundll32.exe	88
PID 124 wrote to memory of 1280	124	rundll32.exe	88
PID 124 wrote to memory of 1280	124	rundll32.exe	88
PID 124 wrote to memory of 1280	124	rundll32.exe	88
PID 124 wrote to memory of 1280	124	rundll32.exe	88
PID 124 wrote to memory of 1280	124	rundll32.exe	88

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\presa\vsdbg.dll,#1
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:124
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe"
  2⤵
  PID:1280

memory/1280-0-0x0000000140000000-0x00000001400E2000-memory.dmp

Download