Overview
overview
6Static
static
3Plugins/Si...in.dll
windows11-21h2-x64
1SilverBullet.exe
windows11-21h2-x64
6amd64/Micr...00.dll
windows11-21h2-x64
1amd64/Micr...00.dll
windows11-21h2-x64
1bin/AngleSharp.dll
windows11-21h2-x64
1bin/BCrypt.Net.dll
windows11-21h2-x64
1bin/Bouncy...to.dll
windows11-21h2-x64
1bin/Captch...re.dll
windows11-21h2-x64
1bin/CaptchaSharp.dll
windows11-21h2-x64
1bin/Cloudf...Re.dll
windows11-21h2-x64
1bin/Common...or.dll
windows11-21h2-x64
1bin/ControlzEx.dll
windows11-21h2-x64
1bin/CryptSharp.dll
windows11-21h2-x64
1bin/EO.Base.dll
windows11-21h2-x64
1bin/EO.Web...pf.dll
windows11-21h2-x64
1bin/EO.WebBrowser.dll
windows11-21h2-x64
1bin/EO.WebEngine.dll
windows11-21h2-x64
1bin/ExCSS.dll
windows11-21h2-x64
1bin/Extreme.Net.dll
windows11-21h2-x64
1bin/Fizzler.dll
windows11-21h2-x64
1bin/GalaSo...as.dll
windows11-21h2-x64
1bin/GalaSo...rm.dll
windows11-21h2-x64
1bin/GalaSo...ht.dll
windows11-21h2-x64
1bin/HashLib.dll
windows11-21h2-x64
1bin/Humanizer.dll
windows11-21h2-x64
1bin/ICShar...it.dll
windows11-21h2-x64
1bin/IronPy...es.dll
windows11-21h2-x64
1bin/IronPy...te.dll
windows11-21h2-x64
1bin/IronPy...pf.dll
windows11-21h2-x64
1bin/IronPython.dll
windows11-21h2-x64
1bin/Jint.dll
windows11-21h2-x64
1bin/LiteDB.dll
windows11-21h2-x64
1Analysis
-
max time kernel
27s -
max time network
38s -
platform
windows11-21h2_x64 -
resource
win11-20240419-en -
resource tags
arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system -
submitted
28-04-2024 07:23
Static task
static1
Behavioral task
behavioral1
Sample
Plugins/SilverBullet.Plugin.dll
Resource
win11-20240426-en
Behavioral task
behavioral2
Sample
SilverBullet.exe
Resource
win11-20240419-en
Behavioral task
behavioral3
Sample
amd64/Microsoft.VC100.CRT/msvcp100.dll
Resource
win11-20240426-en
Behavioral task
behavioral4
Sample
amd64/Microsoft.VC100.CRT/msvcr100.dll
Resource
win11-20240419-en
Behavioral task
behavioral5
Sample
bin/AngleSharp.dll
Resource
win11-20240426-en
Behavioral task
behavioral6
Sample
bin/BCrypt.Net.dll
Resource
win11-20240419-en
Behavioral task
behavioral7
Sample
bin/BouncyCastle.Crypto.dll
Resource
win11-20240419-en
Behavioral task
behavioral8
Sample
bin/CaptchaSharp.Services.More.dll
Resource
win11-20240426-en
Behavioral task
behavioral9
Sample
bin/CaptchaSharp.dll
Resource
win11-20240426-en
Behavioral task
behavioral10
Sample
bin/CloudflareSolverRe.dll
Resource
win11-20240419-en
Behavioral task
behavioral11
Sample
bin/CommonServiceLocator.dll
Resource
win11-20240426-en
Behavioral task
behavioral12
Sample
bin/ControlzEx.dll
Resource
win11-20240419-en
Behavioral task
behavioral13
Sample
bin/CryptSharp.dll
Resource
win11-20240419-en
Behavioral task
behavioral14
Sample
bin/EO.Base.dll
Resource
win11-20240419-en
Behavioral task
behavioral15
Sample
bin/EO.WebBrowser.Wpf.dll
Resource
win11-20240419-en
Behavioral task
behavioral16
Sample
bin/EO.WebBrowser.dll
Resource
win11-20240426-en
Behavioral task
behavioral17
Sample
bin/EO.WebEngine.dll
Resource
win11-20240419-en
Behavioral task
behavioral18
Sample
bin/ExCSS.dll
Resource
win11-20240426-en
Behavioral task
behavioral19
Sample
bin/Extreme.Net.dll
Resource
win11-20240426-en
Behavioral task
behavioral20
Sample
bin/Fizzler.dll
Resource
win11-20240426-en
Behavioral task
behavioral21
Sample
bin/GalaSoft.MvvmLight.Extras.dll
Resource
win11-20240426-en
Behavioral task
behavioral22
Sample
bin/GalaSoft.MvvmLight.Platform.dll
Resource
win11-20240426-en
Behavioral task
behavioral23
Sample
bin/GalaSoft.MvvmLight.dll
Resource
win11-20240419-en
Behavioral task
behavioral24
Sample
bin/HashLib.dll
Resource
win11-20240419-en
Behavioral task
behavioral25
Sample
bin/Humanizer.dll
Resource
win11-20240419-en
Behavioral task
behavioral26
Sample
bin/ICSharpCode.AvalonEdit.dll
Resource
win11-20240426-en
Behavioral task
behavioral27
Sample
bin/IronPython.Modules.dll
Resource
win11-20240426-en
Behavioral task
behavioral28
Sample
bin/IronPython.SQLite.dll
Resource
win11-20240419-en
Behavioral task
behavioral29
Sample
bin/IronPython.Wpf.dll
Resource
win11-20240419-en
Behavioral task
behavioral30
Sample
bin/IronPython.dll
Resource
win11-20240426-en
Behavioral task
behavioral31
Sample
bin/Jint.dll
Resource
win11-20240419-en
Behavioral task
behavioral32
Sample
bin/LiteDB.dll
Resource
win11-20240426-en
General
-
Target
SilverBullet.exe
-
Size
2.2MB
-
MD5
0267076b75cdcfa7ea98aba0bf033aee
-
SHA1
e168f887d26f0f752ef9e28ffc154b9afc1f1783
-
SHA256
9f160d80765337c3609242b9d0bd4d16856e1d57a7c2ff55ce8b00b45e5bea81
-
SHA512
18899a1b90a85ef2adbc71224d51ae51ea7e87662f71ff498734cf8a267aafd1c265bdb5a78b78437168f825ff28d894420ffdeb6af1653d150740b93d487122
-
SSDEEP
24576:ySvh1TfFIH9gYRRcY+32oQRLwDQF4eaE2cZPeAgF7H2oQRLwDCTCnVHtLOgTqEjK:y0h/7DQB/FOLDQB2zOQB
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs
flow ioc 3 raw.githubusercontent.com -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3400 SilverBullet.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
MD5cb01e29b8fa62a34c2b647ca43a33043
SHA113ddcd4a66371000288e5c08894bbd3a59f79770
SHA256be8484b757fab96da45474bf7efa288990ade0ba2f568c70b5747a59de2c7c57
SHA512708f47878e31aee26d379f941b27ac4568c4909b8d2bd3df00a15481cd05f61d22eef5e230bddc67a78ac08d4309d0e580f9e00ef6810721a2d3564cf190fbad