ac7010253b5e2a1fef924d2afbd5a35b8a6688ed10813625d6ae7489ba16f7bf

Sharing

Copy URL

Twitter E-mail

General

Target

silverbllet.rar
Size

144.5MB
Sample

240611-stjxya1gqe
MD5

fc50b84ed55fb6f340d3fe9f0fe7de92
SHA1

9f96ac12162f84a462ff2c247c0530d8c8826857
SHA256

ac7010253b5e2a1fef924d2afbd5a35b8a6688ed10813625d6ae7489ba16f7bf
SHA512

c7f4a168303ad37894b9469b120be84b499948c3a4da09cd6cb654005616880716dc986511de3e4554274b4d2b754a65625bfd654f54b6cd893c911793cda210
SSDEEP

3145728:0/b1yaL4Ac4p6IXPUm+0B6sHdaRrgEs3Pw2/95J17F86QFjd4b:Q4aL9c4pzXPXB6sHdArdD2R1Kf4b

Score

6^/10

Malware Config

Targets

- Target
  
  Plugins/SilverBullet.Plugin.dll
- Size
  
  19KB
- MD5
  
  66760a83b330cfffc689b27b9047ae0d
- SHA1
  
  2be7a858e9a5f45fbbe5f5ef60974fb9cb8b2746
- SHA256
  
  e53cd048fd63cf315507c53027a1613d7556ea38e8bd1aec2cbda7decec80fcf
- SHA512
  
  9b60496c8aeba5d0433127bfb82bcc6225e6100649a7231766a63169a106b14606be9499a7f0c75ac965e1ef50888f6b0ae323b3a9a9abe0c3b7e38bda901153
- SSDEEP
  
  192:x5c1ZpcnFUe5gibA5vTPW65Ir19qTPPzy4fXgSvPKiKLDjZ14BJGj6waP+gUB/Sj:bicukbaBy9KPPz1vKLD91GIyAa9OosG
Score

1^/10
behavioral1 behavioral2
- Target
  
  SilverBullet.exe
- Size
  
  2.2MB
- MD5
  
  0267076b75cdcfa7ea98aba0bf033aee
- SHA1
  
  e168f887d26f0f752ef9e28ffc154b9afc1f1783
- SHA256
  
  9f160d80765337c3609242b9d0bd4d16856e1d57a7c2ff55ce8b00b45e5bea81
- SHA512
  
  18899a1b90a85ef2adbc71224d51ae51ea7e87662f71ff498734cf8a267aafd1c265bdb5a78b78437168f825ff28d894420ffdeb6af1653d150740b93d487122
- SSDEEP
  
  24576:ySvh1TfFIH9gYRRcY+32oQRLwDQF4eaE2cZPeAgF7H2oQRLwDCTCnVHtLOgTqEjK:y0h/7DQB/FOLDQB2zOQB
Score

6^/10
- Legitimate hosting services abused for malware hosting/C2
behavioral3 behavioral4
- Target
  
  amd64/Microsoft.VC100.CRT/msvcp100.dll
- Size
  
  593KB
- MD5
  
  d029339c0f59cf662094eddf8c42b2b5
- SHA1
  
  a0b6de44255ce7bfade9a5b559dd04f2972bfdc8
- SHA256
  
  934d882efd3c0f3f1efbc238ef87708f3879f5bb456d30af62f3368d58b6aa4c
- SHA512
  
  021d9af52e68cb7a3b0042d9ed6c9418552ee16df966f9ccedd458567c47d70471cb8851a69d3982d64571369664faeeae3be90e2e88a909005b9cdb73679c82
- SSDEEP
  
  12288:koBFUsQ1H5FH3YUTd/df0RA7XkNvEKZm+aWodEEiblHN/:dFUsQ1H5FHdGKkNvEKZm+aWodEEcHN/
Score

1^/10
behavioral5 behavioral6
- Target
  
  amd64/Microsoft.VC100.CRT/msvcr100.dll
- Size
  
  809KB
- MD5
  
  366fd6f3a451351b5df2d7c4ecf4c73a
- SHA1
  
  50db750522b9630757f91b53df377fd4ed4e2d66
- SHA256
  
  ae3cb6c6afba9a4aa5c85f66023c35338ca579b30326dd02918f9d55259503d5
- SHA512
  
  2de764772b68a85204b7435c87e9409d753c2196cf5b2f46e7796c99a33943e167f62a92e8753eaa184cd81fb14361e83228eb1b474e0c3349ed387ec93e6130
- SSDEEP
  
  12288:QgzGPEett9Mw9HfBCddjMb2NQVmTW75JfmyyKWeHQGoko+1:HzJetPMw9HfBCrMb2Kc6dmyyKWewGzB1
Score

1^/10
behavioral7 behavioral8
- Target
  
  bin/AngleSharp.dll
- Size
  
  868KB
- MD5
  
  18e0a172486f52aeea0c151684a01bdd
- SHA1
  
  45e32fa4c5a385d41e9ed7ff88ac9e8d8875d2a3
- SHA256
  
  6a4a3f42c6f5961474441fc0b849ba89ceb59a73a0a6a2464849fec7c08c2448
- SHA512
  
  21d8e54aa03ef0c0d5ca6b3a6b57e2ec4ca2a89e22c08d99da87ef63dc3fed05b0d8171e4fd51aabfca0c1df111c18651be74a764b7caf2a10a97c360228dd57
- SSDEEP
  
  12288:QoewH7fQcixxJyemAOBwZVvq48HKIqOWUN7LVyTDkz:he0ixhOBwZtqwUN7LVKkz
Score

1^/10
behavioral10 behavioral9
- Target
  
  bin/BCrypt.Net.dll
- Size
  
  14KB
- MD5
  
  6a56593ef2ef2d86f5ec26d2b3c50686
- SHA1
  
  344d593b6973288b62c6ae91d26237ecaf02096f
- SHA256
  
  e1f0f6abd5b942172ec00f8b6a341dc9e484e6a63031b7699c5b41f02df9cd55
- SHA512
  
  ba2dc71006550d9fed140459020c31183f16f90d6f2e3793ff79035706514a3fc8fb10c68dd64fdfb4fa23b6082c21e18559fb7ec4e7d1ee4571645ab8f92262
- SSDEEP
  
  192:irPd5E17sTjoomT8VqFVAeXJHJAyZJg8D0KThxA+rAQE+tnJiOUDyv8ov9jhCGk:eKP2qMeXJpJgLa0MpfDVQGky5X
Score

1^/10
behavioral11 behavioral12
- Target
  
  bin/BouncyCastle.Crypto.dll
- Size
  
  2.5MB
- MD5
  
  f0b3e112ce4807a28e2b5d66a840ed7f
- SHA1
  
  54a6743781fd4ceb720331fce92f16186931192d
- SHA256
  
  333903c7d22a27098e45fc64b77a264aa220605cfbd3e329c200d7e4b42c881c
- SHA512
  
  dc8ec9754c5e86f7e54e75ff3e5859c1b057f90e9c41788037b944a5db2cb3b70060763d0efcbe55ec595bcc47a9c0ff847a4876821470ca1659c31afd5b0190
- SSDEEP
  
  49152:OSSJ+G1PjodumkjD6Oc0mqHZwueCtbu9kQN:6xodumo6Lr
Score

1^/10
behavioral13 behavioral14
- Target
  
  bin/CaptchaSharp.Services.More.dll
- Size
  
  13KB
- MD5
  
  9e9a0b5ab3f46e72882c5acb18a7d1ad
- SHA1
  
  6422a59282d1356eaaf9177aa81947aaeea6cebb
- SHA256
  
  08365c9f18aaad2f5796c905b71aef45ad5179e3bd749ae133f4619a943dd2b8
- SHA512
  
  5e6f43f65a945546c61a9bf5d02bebb15b0921aaa50c64be83410dd644e4a1a44faf190fcbfb89325f0d61c0a373a9cdba4bf5fd9da57086e934aab943bc7c05
- SSDEEP
  
  192:WGztCIsv9rZOe8n5FTuhBZeJsWagClEg+w2ZN2WiEJfEJlrCoKcz1:WGztC3rA54gJ7agCJ+xZiENEjZKM1
Score

1^/10
behavioral15 behavioral16
- Target
  
  bin/CaptchaSharp.dll
- Size
  
  131KB
- MD5
  
  cb69cd7b4ef360b7ab17fefc8d32335a
- SHA1
  
  055101214bacaa80a7a512e3b6767f1b3232abe9
- SHA256
  
  6f7f89efb97ef7a790f32997e5ff5d4963a31d70c19334f747954d34b7d4f5e9
- SHA512
  
  cec3ca14d7af6d26c6271d13ea8e802c0dd9acb84e8970231d1724d6ddd9f9cde83b2686946742783d7688518257b527136c499adf1d40046326329e8658761b
- SSDEEP
  
  3072:2m4xeRGbNewWnAJQjq1/XjE6c1wNc6E9449x:u8nAJQjQvje
Score

1^/10
behavioral17 behavioral18
- Target
  
  bin/CloudflareSolverRe.dll
- Size
  
  79KB
- MD5
  
  80406e5e8caf22ac3ad1aaec6ce05379
- SHA1
  
  9e35560a4acfc389f520ebf5e431e5990e59316f
- SHA256
  
  705bab4da9023768a242b899008ac1ecc5521131a8ce928929c74aff69672e79
- SHA512
  
  e03295f37984bf78948e6bc84c10de8134bde7bf80887fb216e5f45646f5153d17e93d666d74d49effc3baebd280544d19b556f670258b920903e68975a45222
- SSDEEP
  
  1536:bYivK8sVHezgHOtEVVnmG0mC5OqGTiDm7b0YM89TQZKqqKKO2eWu27Jl6i46iBdz:sDHAo+EV4rj4T7b0YM89TQZKqqKKO2e5
Score

1^/10
behavioral19 behavioral20
- Target
  
  bin/CommonServiceLocator.dll
- Size
  
  9KB
- MD5
  
  39ee6aa23c8b16b83786844c15ca7a8e
- SHA1
  
  b3987325030d0b849e73d235dc5960bc4b7c7b37
- SHA256
  
  12e631d024aa0061a950ad56ce7781c65f6e7a2c45f3d00bf1ea218a0f8efe64
- SHA512
  
  cbed4e2d5d0edb76764d0c5cb0fee4d95743cc734d43ec9271d15fd6f41f23446cd7f9d2aa6e5e6fb4023511e80688f1be2f07fc8648f82bffcb6dcb061ee717
- SSDEEP
  
  192:8VtbOf3YdnqSoG4MUzGRxHjgKqyOwFuRlbiW:8Vtaf3YP4MUzOxHjgKqlRBiW
Score

1^/10
behavioral21 behavioral22
- Target
  
  bin/ControlzEx.dll
- Size
  
  230KB
- MD5
  
  9de654c7a91fe706913a2cdcf0f2a08d
- SHA1
  
  ed69588d4c78e911d0aed9cabc3587a606e9b83b
- SHA256
  
  054d39ba9084d0440423bee00a438d96e22cdc4ea1b0cdc028c1a16f69bd8dd0
- SHA512
  
  0a17552858c8148b05dd416f0bd7882378894dd9261ca11796ce1d84a9fd2acdf6e4a01457638c6fa67f30116f869a46170ccdbfb443751cc78c6b75bbe66de8
- SSDEEP
  
  6144:5CCcdInWruKfjsiGRlRckGspY88CRr57gP2rxp+7vVNviPF1jNnmN:57lAED6x
Score

1^/10
behavioral23 behavioral24
- Target
  
  bin/CryptSharp.dll
- Size
  
  58KB
- MD5
  
  ed9a681e7f612ec8ddeae668312c6778
- SHA1
  
  033a171624699a0a8ebf5226916a2a051bc29bbb
- SHA256
  
  f14e2e528b56f88106e7df0d40db9c4fcde3dcdb7f7182873b6997cb8d5d0610
- SHA512
  
  51d2060851b03d0c132d00ae600707561a749a80b0cec8f131c0aca4d9509fb0f327a08056c00d54f24d03986fa2ee239b9a1955a8eea3c420ee871cbeace42e
- SSDEEP
  
  768:gLmEUv+8NQBYED86sGNgnRj4+hKkF1vnGq+xu9z8nS0ezkdh0RoqXfLt4s+B:tcPWn1+xIISfwmouL+z
Score

1^/10
behavioral25 behavioral26
- Target
  
  bin/EO.Base.dll
- Size
  
  3.7MB
- MD5
  
  d998507c2d0676b226342113e55de390
- SHA1
  
  5768351b26604f0c5807e0a0f400f79e6b94a16f
- SHA256
  
  6aa21b3e05f8fa6d8d59453869ef1368e78c1e6aa64b57c7e5b454b32d1aba08
- SHA512
  
  61e85217333d2190bed1fcc3b14586187435ed98beed05270d5c4da83fdc4d720af81ee0ab57f9402702a5171ed0a81c24922b0cc8568d79ae313611d468a502
- SSDEEP
  
  49152:1N+iTj0PlBuxzdoRI3mmmdBIqvnWTdqhO2cHTOP36HTkd6EFO8:1NMPWF3ady8udqhO8
Score

1^/10
behavioral27 behavioral28
- Target
  
  bin/EO.WebBrowser.Wpf.dll
- Size
  
  32KB
- MD5
  
  fea36fb93bf67d31ce0765e67f4d89c9
- SHA1
  
  e31f655bf16fd826f61140055a1a810f540092c8
- SHA256
  
  d7eb28a9d803e0ccbbc5f9b61a0b28d0740969665891ff2136f95049f1278c61
- SHA512
  
  6fb1f9fb04d71889f4acade553964e9a2d4f769b341ec9aa6839029bfd5a737d72b9bb08a056f678c2b0e6af892622b6412083ed38dfeaebeaf91414352caf29
- SSDEEP
  
  384:TsTwGhigOi9Jh5gwYaoJSxT/CRrtBdtt8pNqe3IpPzV1DSuzJiaPvDNyCPKOI7th:8wGe8xMtipNPPuzdNT+tu/l0EJPxYH/
Score

1^/10
behavioral29 behavioral30
- Target
  
  bin/EO.WebBrowser.dll
- Size
  
  202KB
- MD5
  
  97bcc74ef23c395bc3d9329759c6e062
- SHA1
  
  97d2f1ed7f7b7155ef53b45ba6ec5b06e699001c
- SHA256
  
  ac0b15cf31ae355d3e30e8d3cea4ebbca4fc0302e8b8d1559d399c561d2b6a54
- SHA512
  
  88dd58c8dbe9428d77f31ce1a53b8bba1c03af68164a80cf41242ff50bc99521573e456d8216ee7ab280d4d3010b41b47b5de7d6726cf337e9f21c044836501e
- SSDEEP
  
  3072:uPfZ7axNweGBOW2QD3cVoZQqebYA01C4BDjpzpaLo3nUqe:47abfDVoGNs3U4BD1tSq
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32