blankgrabber | 7e551e42b6bafb333c347e4abd98b27ab240d7418728b84350c4ecf01d4b9628

General

Target

SilenceTool ( paid ).rar
Size

8.2MB
Sample

241210-qcgp5s1mgl
MD5

033bfeba1a094de252c8236e0d82bf95
SHA1

ab9c673a5496494e94b818b5314305c85467b92e
SHA256

7e551e42b6bafb333c347e4abd98b27ab240d7418728b84350c4ecf01d4b9628
SHA512

55d7c0bf349be07ad90041633bbe4cf59923076d2fa27eb4e15f662c664f66f0adc5a3b1f8461a366182d2ae1e6a7d459a68d90b66c8d6635f2a8b1b60c51667
SSDEEP

196608:X/+B8FQ2GKz4P0b56DL4Ux1ZFIXeqZ05NQUI9S4/5TUE9cCpa:XmBSQ2GKz4m6wm1L8f5UI7/JwKa

Score

10^/10

Malware Config

Targets

- Target
  
  SilenceTool ( paid ).rar
- Size
  
  8.2MB
- MD5
  
  033bfeba1a094de252c8236e0d82bf95
- SHA1
  
  ab9c673a5496494e94b818b5314305c85467b92e
- SHA256
  
  7e551e42b6bafb333c347e4abd98b27ab240d7418728b84350c4ecf01d4b9628
- SHA512
  
  55d7c0bf349be07ad90041633bbe4cf59923076d2fa27eb4e15f662c664f66f0adc5a3b1f8461a366182d2ae1e6a7d459a68d90b66c8d6635f2a8b1b60c51667
- SSDEEP
  
  196608:X/+B8FQ2GKz4P0b56DL4Ux1ZFIXeqZ05NQUI9S4/5TUE9cCpa:XmBSQ2GKz4m6wm1L8f5UI7/JwKa
Score

7^/10

upx
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  SilenceToolSetup.exe
- Size
  
  8.3MB
- MD5
  
  03fb46e419cfc916b3f65351cb307032
- SHA1
  
  afca7bc5b71da8be1e8638bfb641a74552204d8d
- SHA256
  
  9e4205975ab4e4f33b5e3bd251f83dcdaac0a04d81882c89e8011ab760586f5b
- SHA512
  
  cc791faefac084efa8c2c9771255bc8b0b0768694589814bbc5a25915f2adb71f22a16ce61024ffd5c7aa006ed4330468cdda5d7678a18524c0f606ab55dbab3
- SSDEEP
  
  196608:pUuYGwfI9jUCzi4H1qSiXLGVi7DMgpZASEyQ0VMwICEc/j+:gIHziK1piXLGVE4UrS0VJa
Score

8^/10

upx collection credential_access defense_evasion discovery execution persistence privilege_escalation spyware stealer
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Drops file in Drivers directory
- Clipboard Data
  Adversaries may collect data stored in the clipboard from users copying information within or between applications.
  collection
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Legitimate hosting services abused for malware hosting/C2
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
- Enumerates processes with tasklist
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  
  �>w�.pyc
- Size
  
  1KB
- MD5
  
  467557bea33c0e55074221237aff6cea
- SHA1
  
  282ca6721454805485cdc878b3b6c01e0caf880a
- SHA256
  
  419307955704b61ae44e99bc7ca9b9be4c0d072b79c14d86d146a1342bac8ba4
- SHA512
  
  4085609b6f9b3430d7aa824f5e16abfe8bd992c564769c14b7a24fca35fa64a981b125cb516307795fe434e83d16c681dc9744e1160c895b92c9fbb7498ac886
Score

1^/10
behavioral5 behavioral6