Static task
static1
Behavioral task
behavioral1
Sample
Powershell-Token-Grabber-main/builder.bat
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Powershell-Token-Grabber-main/builder.bat
Resource
win10v2004-20230220-en
General
-
Target
Powershell-Token-Grabber-main.zip
-
Size
28KB
-
MD5
cb0a157fa70091b2549d91f5b2d7da74
-
SHA1
876e26b3b05745efb759f13b6de3863dad5ddabe
-
SHA256
7b8b4f9af366c1de6defb48b46a9bb75c859a33085120c062339a4c549408cea
-
SHA512
fc4c75c0d0036ef345cd169c17e9f4b9bef9a03510cccfe2766653c905e54a763719eee5f5b318cfd4c55efd6ec55124543afcc29ffe5fe5f682bdb51e685ee7
-
SSDEEP
768:htl8vVRqDqpMJAF+aN7GoxARa6qNaXyRC5rRr/g0NLdC8:3+nqWCAFfd6qsy4Fm0NZC8
Malware Config
Extracted
https://raw.githubusercontent.com/KDot227/Powershell-Token-Grabber/main/main.
https://github.com/KDot227/Somalifuscator/archive/refs/heads/main.zip
Signatures
Files
-
Powershell-Token-Grabber-main.zip.zip
-
Powershell-Token-Grabber-main/.gitignore
-
Powershell-Token-Grabber-main/LICENSE
-
Powershell-Token-Grabber-main/README.md.ps1
-
Powershell-Token-Grabber-main/builder.bat
-
Powershell-Token-Grabber-main/builder.ps1.ps1
-
Powershell-Token-Grabber-main/injection.js.js
-
Powershell-Token-Grabber-main/main.bat.bat .ps1
-
Powershell-Token-Grabber-main/main.ps1.ps1
-
Powershell-Token-Grabber-main/main.py
-
Powershell-Token-Grabber-main/requirements.txt