General
- Target VeloSniper_Setup.exe
- Size 19.3MB
- Sample260802-xetk2szbmf
- SHA256 f8ac7911ae06688c1d67c4fa7ea3261e23562503ed7206a2eb24009e0ceabe2d
- MD5 305b56f599eeb61bae38f543a04ae3f8
- SHA1 287c9337dbb6ae33875256c16c854e7145106b55
- SHA512 9ba91baa8fa84cd65e3e96257cceea8266bca6bd0f8acc8cf24f3bfd045cedc1984e4298377e96af36ce228862f75747ff22902c006567d135441c8cadfde765
- SSDEEP 393216:LaFmFkO+On3U1zpoKeuRHf11mpVKq95caFIx7plobCnBCxMUcHSx35I3kG8:qMkO+WU56QHf1s/K8caFIx7plbnBCxlX
- TLSH T1F717333BF297643EE02A2A3A7971E12458377A61A5124C1697ECF89CCF750701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
VeloSniper_Setup.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
VeloSniper_Setup.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target VeloSniper_Setup.exe
- Size 19.3MB
- SHA256 f8ac7911ae06688c1d67c4fa7ea3261e23562503ed7206a2eb24009e0ceabe2d
- MD5 305b56f599eeb61bae38f543a04ae3f8
- SHA1 287c9337dbb6ae33875256c16c854e7145106b55
- SHA512 9ba91baa8fa84cd65e3e96257cceea8266bca6bd0f8acc8cf24f3bfd045cedc1984e4298377e96af36ce228862f75747ff22902c006567d135441c8cadfde765
- SSDEEP 393216:LaFmFkO+On3U1zpoKeuRHf11mpVKq95caFIx7plobCnBCxMUcHSx35I3kG8:qMkO+WU56QHf1s/K8caFIx7plbnBCxlX
- TLSH T1F717333BF297643EE02A2A3A7971E12458377A61A5124C1697ECF89CCF750701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled