blankgrabber | d473f03ab8322ad35b5eb34cee854d67f48c8f1cfcab5a28119149fbfeb8137a

General

Target

woofer.exe
Size

5.8MB
Sample

241205-tpp4tssjbz
MD5

df7d7682219321201a496fac6f776747
SHA1

cd7de98ae7c3d71d0752e1ca9fa5165e8bb74073
SHA256

d473f03ab8322ad35b5eb34cee854d67f48c8f1cfcab5a28119149fbfeb8137a
SHA512

5136f6349140ad98e3640ce1192a37b730bb640effa033cb9d1c55febee99eb1b239014f828f06e338687031c289e9b28014ee207f284bc227933329ef628561
SSDEEP

98304:LimDSuXFRHtJQi9UWvGfqD8WOxfmjaa15uXaDvdCK/blzFS03iw7FwXR6nOetJ8m:LimDZVRHvUWvozWOxu9kXwvdbDlA03NN

Score

10^/10

Malware Config

Targets

- Target
  
  woofer.exe
- Size
  
  5.8MB
- MD5
  
  df7d7682219321201a496fac6f776747
- SHA1
  
  cd7de98ae7c3d71d0752e1ca9fa5165e8bb74073
- SHA256
  
  d473f03ab8322ad35b5eb34cee854d67f48c8f1cfcab5a28119149fbfeb8137a
- SHA512
  
  5136f6349140ad98e3640ce1192a37b730bb640effa033cb9d1c55febee99eb1b239014f828f06e338687031c289e9b28014ee207f284bc227933329ef628561
- SSDEEP
  
  98304:LimDSuXFRHtJQi9UWvGfqD8WOxfmjaa15uXaDvdCK/blzFS03iw7FwXR6nOetJ8m:LimDZVRHvUWvozWOxu9kXwvdbDlA03NN
Score

8^/10

upx collection defense_evasion discovery execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Clipboard Data
  Adversaries may collect data stored in the clipboard from users copying information within or between applications.
  collection
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
- Enumerates processes with tasklist
  discovery
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  �.pyc
- Size
  
  857B
- MD5
  
  a7494fe5c51ccbcef955719b5e97e015
- SHA1
  
  37a59d9eb14e43209fc7b25a0c2ec15433c086eb
- SHA256
  
  597e3ac5cf0d1f23e50b010411eb09ae4f8fa7892ee121a35d5f236a4a87b50c
- SHA512
  
  43ea9aaaf22cc1cee42342a20a49cc89eef0ff2c8b661303c92a923c55f596b9b27df39601f7b8e51471010c1450db3902a4e3233c6d8cc7a3de31df2516fa29
Score

1^/10
behavioral3 behavioral4