af4fc9acb0433635e83a55d1ec84ba560a66e807c51c7382bb8a027da5e9f993

General

Target
SilverBullet 1.4.1 [Pro].zip
Size 207.6MB
Sample260805-a6ws6avcmb
SHA256 af4fc9acb0433635e83a55d1ec84ba560a66e807c51c7382bb8a027da5e9f993
MD5 c2f2b7ad3b1b4faab5c568c764807ee0
SHA1 72d97fd76a205e86896f53d0e288fec0d02bbf48
SHA512 72d975ef6b1182e3a62838720937781cf30907b9a6a1b55c1f8b43f21db0c91c7567374102128feb5669db69b8e626406c690852cd9ab1ad409c8bef3ca9b7e8
SSDEEP 6291456:/o9p01In5PYMRF8a8DYT01cPam/ZSto+vISl4ok:/o9pZYMRF9U401cSs+vI04ok
TLSH
T193A833C91782ECDBF5D2323E95EF42A8573D4114C02BD32BE6712290B9A71DDEA9C349
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  SilverBullet 1.4.1 [Pro].zip
- Size 207.6MB
- SHA256 af4fc9acb0433635e83a55d1ec84ba560a66e807c51c7382bb8a027da5e9f993
- MD5 c2f2b7ad3b1b4faab5c568c764807ee0
- SHA1 72d97fd76a205e86896f53d0e288fec0d02bbf48
- SHA512 72d975ef6b1182e3a62838720937781cf30907b9a6a1b55c1f8b43f21db0c91c7567374102128feb5669db69b8e626406c690852cd9ab1ad409c8bef3ca9b7e8
- SSDEEP 6291456:/o9p01In5PYMRF8a8DYT01cPam/ZSto+vISl4ok:/o9pZYMRF9U401cSs+vI04ok
- TLSH
  T193A833C91782ECDBF5D2323E95EF42A8573D4114C02BD32BE6712290B9A71DDEA9C349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  SilverBullet 1.4.1 [Pro]/SilverBulletPro.dll
- Size 3.6MB
- SHA256 9c2504a8ee0d6685ae2a898ae9fb9024ebe07b44eda4d58ce72eb9c0cbed9a06
- MD5 a43a5ac2ad5d4caf6972c1480c8b1d66
- SHA1 ff524774b6bbcf9cb9e3f09b58a35572c2909a60
- SHA512 df45db739cb9b56a71357313c9fd4584baca3e4dddcad60c85fecb4c18ce84913982323553c2971da5762aead285d88e1829e4cf6b9c7219f9c0380fbafe0613
- SSDEEP 49152:W25SOvypw/4qJ/i8kvfp8/AW2rP7c/iykv1p:tMOvypw5pi8kHqZ67Kiykt
- TLSH
  T1F0067B943A644069C6AB07385FF486E09B7E3E0F6B999B5E54F53C1FAC6D1038F06263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  SilverBullet 1.4.1 [Pro]/SilverBulletPro.exe
- Size 613KB
- SHA256 62ef275d396e894861167bd16ffa5fa78773f698447b51315ad84c9c5ff1f0d6
- MD5 ab216b4212f3f27e41b26259a830c777
- SHA1 e2550a35cf1e4f6f08e28c43a6437fad6cc60711
- SHA512 d9b20fa1e0714232b9ad6683951991da3da98c294f8e62b441557b062229bd0a19e127a8e071a30b4033932bb400a4853f7866e3774f134f50538b95b5535bb6
- SSDEEP 12288:hDToXd0Y8NahIRMJuAfki/U7vsBqpq/S1:xoz8A6M0/i/U7vqqp
- TLSH
  T111D4AD45656921A9E3EAB6354F92C675A3363C0E131007DB12F0AD7B3EFE2A75DB8301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral3
- Target
  setuptools/gui-32.exe
- Size 64KB
- SHA256 5c1af46c7300e87a73dacf6cf41ce397e3f05df6bd9c7e227b4ac59f85769160
- MD5 e97c622b03fb2a2598bf019fbbe29f2c
- SHA1 32698bd1d3a0ff6cf441770d1b2b816285068d19
- SHA512 db70c62fb35a8e5b005f13b57c1ebbf6c465f6ff0524422294c43e27fb4aa79379dc1e300ad11dc2354405c43b192ae06b91c0f525a1f2617e4d14673651a87d
- SSDEEP 768:nMgEYaPKRsVvd7M826QXqVXDjPXHyRhQcBU+zGqJS967GMctEvdGA9SYxQ:Mg/6/tM8NXDjPX0QWlfGMckTQ
- TLSH
  T1C7536B21B981C073C4465079482DC7B19F7BBC3126B5C987BB961BBB9F313D1A72B24A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  setuptools/gui-64.exe
- Size 73KB
- SHA256 69828c857d4824b9f850b1e0597d2c134c91114b7a0774c41dffe33b0eb23721
- MD5 2ffc9a24492c0a1af4d562f0c7608aa5
- SHA1 1fd5ff6136fba36e9ee22598ecd250af3180ee53
- SHA512 03806d162931b1dcf036a51e753ff073a43664491a3cd2e649e55dd77d5e910f7bcf1e217eb0889ef606457b679428640e975ee227de941a200f652417bc6d5d
- SSDEEP 1536:MpsuhGpr4+qQt4O/6LEmo1dFPo6O28E0PTBmf2iBQsdkRQ5WF:MpsgozqC4O/jHxo6l0PTBuJBQbRQ5WF
- TLSH
  T118737C5A739044F9D84BC275CDD16A86F372B41A07B5838F072886669F333B1AD3E366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  setuptools/gui.exe
- Size 64KB
- SHA256 5c1af46c7300e87a73dacf6cf41ce397e3f05df6bd9c7e227b4ac59f85769160
- MD5 e97c622b03fb2a2598bf019fbbe29f2c
- SHA1 32698bd1d3a0ff6cf441770d1b2b816285068d19
- SHA512 db70c62fb35a8e5b005f13b57c1ebbf6c465f6ff0524422294c43e27fb4aa79379dc1e300ad11dc2354405c43b192ae06b91c0f525a1f2617e4d14673651a87d
- SSDEEP 768:nMgEYaPKRsVvd7M826QXqVXDjPXHyRhQcBU+zGqJS967GMctEvdGA9SYxQ:Mg/6/tM8NXDjPX0QWlfGMckTQ
- TLSH
  T1C7536B21B981C073C4465079482DC7B19F7BBC3126B5C987BB961BBB9F313D1A72B24A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6