General
- Target QueueSniper.rar
- Size 26.7MB
- Sample260716-zbbl6sg13s
- SHA256 ac1196dac65afd62759b7e8f138f6638fea07812a880faadaf60bd2a47d0c108
- MD5 c9461b7663d12b60918e6459b5d61d99
- SHA1 bdeea84dc9eb8056d9c2c99c5aa63ecb69d86b3f
- SHA512 77c13ea79bd0240503f56d064683ef1a661145876e2dacef8bedd069491b50101e419cbbd1162457fb04569b48a740c99d49a544bef7a5daaeddb14ec984eb14
- SSDEEP 786432:WfOgJOLBG6Fc3h/kR6P9n6AKMr9EbATM8Am6smN:WfOgCrFcx/VAAKMr9jTimA
- TLSH T1A5573316E8D07E1E268E58B86D43FD961A26CE0E33C24FBE5DCCCB97D5082B65346721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
QueueSniper.dll
Resource
win10v2004-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
QueueSniper.dll
Resource
win11ltsc2024-20260710-en
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
QueueSniper.exe
Resource
win10v2004-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral4
Sample
QueueSniper.exe
Resource
win11ltsc2024-20260709-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target QueueSniper.dll
- Size 37.1MB
- SHA256 eac2a3f0f8148a514a90688fe2e945d14847d42938a14f854f3704b95c9be0fa
- MD5 402279d720b74e60dc2a36594b4ba1f7
- SHA1 9ce70037107db8dd3c1e90d9df48413ab29b64ff
- SHA512 39fce386bfb51e811832c48c5f30185f543edb477df9e44ce99306561fe9c9f50fd49d4bc64775df11310be5a7038e0a4a62dac4d35923c64072a6936d99a440
- SSDEEP 196608:3rBiKm+FxPsYMGyHNg4tw6+gJ83fX/4v6Lizdh84VdlKDSW6VJCPCf2LEG:3rhWNb+gGP4i5CPKDSWGJD2LEG
- TLSH T1F6874B43E37250E9D56AD1744E63A963AB30BC5C4334BAE7A5D8CF302B92E70972D748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target QueueSniper.exe
- Size 17.9MB
- SHA256 9f96f3a26df70ed9a3449f9f225d9e436a1ad07fc220f8a5ab15b21ef0cf1532
- MD5 12e64d14269d89a36dd00eaeba0b357c
- SHA1 9d39a3f96fe782592cee5847fe3bdc3398bd3761
- SHA512 fa9ad49cb739b13e5cd037cb2cf230c988f8845685b2e15ff91da923a53d0167923730a6b52f4e60c77079a7387a889c1c7e1e3bf38f5b2afc1665c388352bb6
- SSDEEP 393216:1QlYM684kpB+WnhRe2DlsHWW6mXACu/RAKsapbZy4ZRR+D:1FPkpBT3eWlsMmb6RkatZdp+D
- TLSH T15E17333FB023D4FCC1977079A90385A79D75F8A60254841EC990E53AAFAB4F1471EBE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Loads dropped DLL
-
Adds Run key to start application