blankgrabber | a5f3b6ef55bcd3902e51f641075da35f047e02f972e3b1e6b5dbb83e29e892f9

General

Target
yt-dlp gui.zip
Size 131.7MB
Sample260621-xp91saex6n
SHA256 a5f3b6ef55bcd3902e51f641075da35f047e02f972e3b1e6b5dbb83e29e892f9
MD5 b07f31f00f1cffb152997a0cc536090f
SHA1 5020c448f6480a48131316dae3d63dee7353034d
SHA512 0a971df7709ef3856dd7766d2c9d4a36d5272bcf813e7c7862e52c9b8250d3fd16343459810dd06a1bbaf1c1ca971772a2d60a410719820120b9a9b1fcbd8384
SSDEEP 3145728:6SHH3myQaAU4YAHSIGtFo7pN5lST4g5s/nNl3rNfF8yQH:VdBAU4Y4SIUW/SMg5YR8H
TLSH
T12168335098E19B04A272C552C2D45B48272B4FD613CEA87E5D60B3442ECFDC47BB7BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  yt-dlp gui.console.exe
- Size 89KB
- SHA256 63d55b9249e4d2e67453e008bae144655dc33b275c98b12aed6efaeeff3cff7d
- MD5 2ee3231b725d0676d5e0b62e44ce466e
- SHA1 eb6b1e9dcd448bee28adfcfeaba18df2f89a66e1
- SHA512 5af79f07f3d670cefce702e55d91d9ecf262710a3204d4cbf10ee24a604b1e9e99043ae71742c57d6ab65597a09c94568ee6ddab1bcbbc9a9efd1b3adb4dc258
- SSDEEP 1536:MbJnGpKPvUBQ7CrnXG2zjMNqrRHD7BIV3IwRa3BXL+su:MbJnG0PfUG2nM0rRHDKRI33B7+s
- TLSH
  T16393AE09A39356FCC14BD1747AE289B1F6B2BC3210689F7F4254C7B66D30E106A6AB1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  yt-dlp gui.exe
- Size 95.9MB
- SHA256 e4a037e7ebb727feffe7930bf6d149040faf129e13b363b561a078fb63c2337b
- MD5 c26e68b5bb4c8b52104b4558c23516b3
- SHA1 a40b526cffa6782f1f7bff49a978b4845ec3fdce
- SHA512 ad8e56c8f2ca1164491184832b6db41669dee3aeb0d3477551c9c6f59b019874de50db84a877d072a4705302c84f5823eca97b50ff0feb79b909a0304fd6feed
- SSDEEP 786432:yoKmFNMZe3Q0rexjrxADNt7cjIdLS4q4Rj:yoKioagjrxAJt8IztR
- TLSH
  T12C283B53F2B370ECC56BC23492D76633FA33B85951386D6AD6A0CB742E21E506739E24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  yt-dlp gui.pck
- Size 235.0MB
- SHA256 fc8cb19a694833bebe8de75fa4dbe23f2d50e5b24568aa077c5f6d3609dd7fbc
- MD5 cf26e36783b66b1c655087dd73b57877
- SHA1 bd1cc125717c37176f23eac69928784e034d918a
- SHA512 c7b172ed4f13d45e74e3a45fe52e6faeee093741f33dda6f31f0d9db3020355583fd99c26990554c2faffad1584df998a29eec681a91ccb68e268a6e40d9cf69
- SSDEEP 1572864:Be3d2pFoxyyPVS0Aj1iXt0utr0xkwdcYS/aEHBt6w5Hnflkg+rkVRJsZRw+cJfax:APVveDAqSHakeVR0s
- TLSH
  T1B4C88E9EE1E3509CC127D4B0426AA773BA24786C13205AFB66D9DA306E73FC0573AF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6