BluStealer

Aliases: a310logger

First seen
2021-08-01 00:00:00
Malware type
credential-stealer, keylogger, trojan
Family
Malware family
Last IoC activity
2026-07-21 00:34:47
Profile updated
2026-07-07 14:03:11

Targeted industries: financial-services technology-and-telecommunications

Context

Avast describe this malware as a recombination of other malware including SpyEx, ThunderFox, ChromeRecovery, StormKitty, and firepwd.

Detection coverage

  • 2 YARA rules

Detection rules

  • DITEKSHEN_MALWARE_Win_A310Logger (yara-rule)
  • SEKOIA_Infostealer_Win_Blustealer (yara-rule)

Related threat objects

Reports & references

  • blogs.blackberry.com — Dot Net Stubs Sowing The Seeds Of Discord (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Blustealer (report)
  • decoded.avast.io — Blustealer (report)
  • blogs.blackberry.com — Threat Thursday Blustealer Infostealer (report)
  • gosecure.net — Gosecure Titan Labs Technical Report Blustealer Malware Threat (report)
  • blog.minerva-labs.com — A New Blustealer Loader Uses Direct Syscalls To Evade Edrs (report)
  • twitter.com — 1437435265350397957 (report)

External references