blankgrabber | 4d5e9a81aaec53df6bcade23ae5638527224affdfa165c72fe16299131bb1450 | Triage

Sharing

General

Target

SilverBullet.1.4.1.Pro.zip
Size

242.0MB
Sample

241004-nqyvga1hll
MD5

9e98596b07b993287bd90e82289cdd76
SHA1

5f2fffbf44caf7010626d173fdc2e65a08f5d242
SHA256

4d5e9a81aaec53df6bcade23ae5638527224affdfa165c72fe16299131bb1450
SHA512

eca1a4f18dd76a482b63d930f044a4c440a46e403ce24276468bebc852626d79b03adad15cef5aae057be1e02f016dbb67a28df2ef9466cabd229e8aa200bb57
SSDEEP

6291456:SQP7CpsPvjE5KdRTkAl6LLvRq8Oo9QbtOyXkCAUg:ZP145q466LjnOoQECbg

Score

10^/10

blankgrabber crealstealer discovery pyinstaller

Malware Config

Targets

- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/distutils/util.py
- Size
  
  20KB
- MD5
  
  40f4ee7c94bfceca9d76bb5cf54932d2
- SHA1
  
  9d5e00b01c65c3aedb70f2622b9c7bbf828452bd
- SHA256
  
  a4f6d0013675f6aa6ccf684e862e5bd2042d9fe96d04370d2ad4865182613c4e
- SHA512
  
  69077a9cc70bd8b922094de7b93db7646a74b583408cb19f1745c8a04a492d8a458250ab6da8e59add6c48fdb1c7ba093de888c9e2c171b9500848bb44e1e202
- SSDEEP
  
  384:Pspyr7mOWhQHkUf27lNLBY2egwpvmCcT9i4Q3T6xv:PN7mOWhQENNTegwRyT9iTD6xv
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/distutils/version.py
- Size
  
  12KB
- MD5
  
  ba66f49f5cb1e15deebac1f92bf6753f
- SHA1
  
  91389e65fb7930058c0d3bce244a16b7ab89130c
- SHA256
  
  56ee5445d036b16bf887f2b71270b9dff26b395670ed73bde3124a692953bbe5
- SHA512
  
  972d1058243ce3d4f239fa6805cbdc55e0bdf0db4b4c16fb34f7c8403d59d6500574de773866e889ee5cf3d63749da48777d6f1598cd99032d35d9aa303ce2c3
- SSDEEP
  
  384:FJ/zIVlTJJZUno7SoVfwhZBFJucReV4f2:P/Y7Tmo7S0fIZBPucIV4f2
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/distutils/versionpredicate.py
- Size
  
  5KB
- MD5
  
  df9d465dd43309e6bd42c323fb2928e2
- SHA1
  
  e2df6234d5f98df9266f786059e9b7280a1d93db
- SHA256
  
  d3ab211bd34754c6d3738fa872173a17421bb300e67ab77f649f2c3538a937ec
- SHA512
  
  e56761f81ab003bcbac93c3ef8f86b56ebd27bcd65daa52a70664b162f729e6904d93d862313d829c80a71e4c3526938d8185df581cf43e32a2c26ffa13f267a
- SSDEEP
  
  96:98uBsb7SQ2EoxR1JQeHILG/R/kX/Ix/aJoGz4dyIdxtjrIpCqPLU:98ysOQ2EoVpUG/R/8/Ix5ndnxtWPLU
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/doctest.py
- Size
  
  104KB
- MD5
  
  f9cf4c1e521bae3919a1c48b91c63e56
- SHA1
  
  e29f805043cd126ff46615bea73a8961b7b98b88
- SHA256
  
  b552a5bc0a6262d2ad4edb5b7022f5cad15de9a35f144978184260d2ee447a62
- SHA512
  
  6266dd639efff83b4f899f413bf796626b82e77b5e33edee4afc3186e845ba0ba787259ad5d079fff4c1f4ed1a584f8288d12c7cd5f211cf718a1b89087d4866
- SSDEEP
  
  3072:k31db9Wi0veFhoWYsioJT0a+/Fj9sjQeO9xnVUaH8e+t0T+2m:odb9Wi0veFh7YsioJT0a+/Fj9sjQeO9M
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/dummy_threading.py
- Size
  
  2KB
- MD5
  
  dc8672871313392fc332801bd40c1181
- SHA1
  
  e5c0e2450b9d70722daef79ff4c96feb506e1d43
- SHA256
  
  9514afef8f805a4cf87a0289beb36e5484687e59e8f8664ac4371f934928ddb3
- SHA512
  
  3d9e11f981789326ee646d5aaa372c43ab7489d317c5cf2322a144bfd67a5715e45fb45ff95be71797c068f88f5586b4aea0a1bb63cbf4122089fdf4c1a6380f
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/__init__.py
- Size
  
  1KB
- MD5
  
  d4bfae311befc2ff80f8497a34718395
- SHA1
  
  95e3d60857238bdce650ef0654cf23c2fe3a613c
- SHA256
  
  8606bd96b9a891db4190209dcd5d398ebd9a3b12550aba20fc83a48a89296103
- SHA512
  
  4a235b59e5d6613ff882a4cf778345c13c8907eafaca38e3d5f031752a094997af17347c9fdf46b9656cddfd0983bbf77fd8e3429e50e8f3bb71636b251179ed
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/_encoded_words.py
- Size
  
  7KB
- MD5
  
  be20289144f59d1f35307cb1391c420c
- SHA1
  
  2d354e3b167a8862e4090b62f37a0ce255dd3862
- SHA256
  
  6fdd988fb6d21d3101f51cbb435b8b8d5f211a71380dfca99bdf9f77a1ff2e52
- SHA512
  
  3d9fc8ad0d04cb496d66ba7b372654e0e386b8bcec91da4d54f07eb441e6aa1ee83bd901f82e88c42d5158ce0484d687e1cff8ba4fe48cb52c964de3fcb76eda
- SSDEEP
  
  192:F2gPi1IygNGmdRBp8+HAemBzJkpVkgnrVe8ONeU8SnN2ENGKTK:F2gPimygNGmjUTsVkgk8O4l7Eh+
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/_header_value_parser.py
- Size
  
  105KB
- MD5
  
  6679552a6ae3722f8dc4d22956f33ed5
- SHA1
  
  c4a54745286306e61a93f149c00af4198e7921a4
- SHA256
  
  962d240c01afc8ef58278fe55ec0159ac1a315a7ec9498eda1722ab06b3c4f04
- SHA512
  
  6ace7ea53b624afb57e6f7faa70685dc02bf5080e454ebe04d3c28cc28df50f340e11376a0c3a666b222948fad25f1036105173e8b234d7103e12c83407426d3
- SSDEEP
  
  1536:MymtUMsnhM4B6ZAV7/cZoiJWn7sx03rf1Xu/6V7asGY7:I+5hBaAV7/cw7sxa
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/_parseaddr.py
- Size
  
  17KB
- MD5
  
  661e5579998048add61b0086506080b6
- SHA1
  
  cb36f0938bacaead40f3b5f7c321aa0ac35a0373
- SHA256
  
  ae38c98e09326ba5510d9bfdb281926ae73c0c6e0aa89f1c87f5d4145b4939d2
- SHA512
  
  fa76f5135651ca8a1787afa6602d8ce7c0d9744eb40d2422485dcf66653b56ecec952e77c9ffc543d4e109573b4ad1a3e8c5c519f0da47765dafdb3d8cdcdefe
- SSDEEP
  
  192:7rjJPsgHvi2r8ISgiXvXOHjPSDtKU2U1aQQQy1leo7T/i/56/Gkj:7rZHv5rwgiX2HSmQs1goL
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/_policybase.py
- Size
  
  14KB
- MD5
  
  fb9fd66ec92a30a515aef85c6dea7c46
- SHA1
  
  9aea66c3a8c27b69c0d107bb91fa17c7e1a1f5eb
- SHA256
  
  fd686dc8ed93de8e70d775c02b7c54a3b5493834c0eb4c8a1efcd92678e2f92b
- SHA512
  
  a387cbbd529e9f7453ade7321174e1a764b6990a4c2210c7f9b2b6a39b7b039c102849851c14b16b4f299f9bb43d1e1c50b4254e47177829449c625500737e22
- SSDEEP
  
  192:5XWVeJxZKF8mJJV22bqcOJ5Ad/8s/4kdztLEldnDm8J+Uc7XaRiZFe++Gk:5XNXKnJQedf/4M5LEXn/2Fy
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/base64mime.py
- Size
  
  3KB
- MD5
  
  3a28fef246150134647b99b701bc07e7
- SHA1
  
  aea18232bf2b32e41d3cc9118203541cf888bd04
- SHA256
  
  4b5f3c6f9960cd986aae23ecd3efccf5dcc8644f7707cc4754e2e8469e0ede6c
- SHA512
  
  c8699f8ba9c58bc8491e2188dd50cec1e01cb6dbf09e8c1c50d5776b67c7b4ef99146e168133e9a6082c0a8ca477c7a049e30fc65c2ad263cb19ae2306a3ca19
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/charset.py
- Size
  
  17KB
- MD5
  
  d2fbcd65150d8f7795d7055ca56de63a
- SHA1
  
  37c0d86460b2f64cb0fc953715d5c3690ca12f47
- SHA256
  
  6148755b619676ca4be62c5962b4a2272705eda400a47a227635983b34252f2b
- SHA512
  
  d734a2f28c13a3cd63117e5e68a601249c296d629cfc8008e08369f794becb467de6e0963285707ce7d37a86422d7d41345b6ad2a83ba90db2b66048e62ea48d
- SSDEEP
  
  384:yfqpEKcNLIGW8M5omAnSjblUbzsn9uokJ:ygERrC5RlWsn9uokJ
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/contentmanager.py
- Size
  
  10KB
- MD5
  
  ad6fc7997dd9c6935365c48549bc9261
- SHA1
  
  02e88537c7dd6a8be74a811fb8c0a3d964afc0ac
- SHA256
  
  272709a46f98ba0e0b515865818e1c81a2e5901c9a1bddddd12cf2d2ce23f449
- SHA512
  
  f33da549e6f2402d405eef2f615e7234ffaa6ad42d40fc9b01077c99da5eb7856c86cf1009c1894edc8847d074c4aa389ba868fbfc3736fbfd2e101235e881ec
- SSDEEP
  
  192:Nwnc3QJVGYLiVFwlTYzS8TC4EGKVDowVP7HmKd:NwnccVei8TC4iVvas
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/encoders.py
- Size
  
  1KB
- MD5
  
  c5d9853a25ff74dbd71a79494e777276
- SHA1
  
  d31b520808c02b931f2f2ec2dc8fbccd11c350d2
- SHA256
  
  1cea37bb71b7aac3c7acb98cccc2f17017f7195ffe510a96f0dacaaba856a2c6
- SHA512
  
  4249f3889e4b6d944b5a0e1274076313ddf48f89705f2d91b3625a6e59e3a5be1101c83619aa0dd2b27931f77ccd1fc81aba7f3c3fb3b5b215a4c1e5f0f365f2
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/errors.py
- Size
  
  3KB
- MD5
  
  ca7146de1adb8d557bcb13b4fc941038
- SHA1
  
  79ccd0a82b25f9eaa786743f1ddefc8eaeb949f1
- SHA256
  
  ebcbb5debc77b9ec0d44dce1892c861228b0b6a51fafc5fb03dba595db7d4326
- SHA512
  
  6af4e9f8f6c5d0f2dd62ac66eb534eeb48c71ef22c95d4b8659515a8fc297d07fd1735ac3fbb819eb88ffc3599b381c789962a12e143b430a48f0134e76d477c
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  SilverBullet.1.4.1.Pro/SilverBullet 1.4.1 [Pro]/lib/email/feedparser.py
- Size
  
  22KB
- MD5
  
  29c8749fa34e95e9d04c6282881e73ea
- SHA1
  
  3ef3b219f6b3f0cc9cae86816f2866856aff12f1
- SHA256
  
  60268514604d88e0b74ca5b729a422931d4f8b0f3730cca96694b4fe381d5ddc
- SHA512
  
  a7b729b60967f7b51df0386ee138a35c0c60ed862827701f3660da4a7f7f3687c827f169fffed43faf38b284cebc70c95f9d7efff50bda98d41faaa9083fcf1a
- SSDEEP
  
  384:YSdeJYwnj9YUn00P4UyGi5BJmEUTb85hEF:YSgh00P4UyGa+EUTbGhEF
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pyinstallerblankgrabbercrealstealer

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32