Overview

overview

10

Static

static

10

SHARPIL.exe

windows7-x64

10

SHARPIL.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SHARPIL.exe

  • Size

    291KB

  • Sample

    241208-yygahatmbt

  • MD5

    fd8dbbff11893d8010cea56e7a8d5370

  • SHA1

    b476bf5ac599b956beeb705c24fbb1a524ba4d7f

  • SHA256

    72d4546c8928cf3e62f19543654da10b704cb1588458f0cc90ec0aaf62dc5d5c

  • SHA512

    60742cecc99e9b2911dfa8a8b822cfaefa5ad109c87a026cf7f67c1e5ada78b12e81c76b29ea7bf171f622ef3012c1737f78fca68d4b850073b4a9fcbcd3b458

  • SSDEEP

    3072:bEgzu/rJWHjv0Zx7t/u5McqTMO53h6CzFBLCpG+kPO9VWZpzQg4e8efzu8dP7HRq:bzktCMcqTMqLCpkO9qpBX8efzNTTOUY

Score
10/10
blackguarddiscoveryspywarestealer

Malware Config

Targets

    • Target

      SHARPIL.exe

    • Size

      291KB

    • MD5

      fd8dbbff11893d8010cea56e7a8d5370

    • SHA1

      b476bf5ac599b956beeb705c24fbb1a524ba4d7f

    • SHA256

      72d4546c8928cf3e62f19543654da10b704cb1588458f0cc90ec0aaf62dc5d5c

    • SHA512

      60742cecc99e9b2911dfa8a8b822cfaefa5ad109c87a026cf7f67c1e5ada78b12e81c76b29ea7bf171f622ef3012c1737f78fca68d4b850073b4a9fcbcd3b458

    • SSDEEP

      3072:bEgzu/rJWHjv0Zx7t/u5McqTMO53h6CzFBLCpG+kPO9VWZpzQg4e8efzu8dP7HRq:bzktCMcqTMqLCpkO9qpBX8efzNTTOUY

    Score
    10/10
    blackguarddiscoveryspywarestealer

    • BlackGuard

      Infostealer first seen in Late 2021.

      stealerblackguard

    • Blackguard family

      blackguard

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks