Static task
static1
Behavioral task
behavioral1
Sample
Powershell-Token-Grabber-main/builder.bat
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Powershell-Token-Grabber-main/builder.bat
Resource
win10v2004-20230220-en
General
-
Target
Powershell-Token-Grabber-main.zip
-
Size
41KB
-
MD5
c07249cddb18630542ddf15df3fbddb9
-
SHA1
3ff8baca9b50853d5b5e5cf84d7869359334f6dd
-
SHA256
11a3cbb7a8943709f99d17eea45bef1743a18e9214c8181cf44b5e316f6716df
-
SHA512
e3dbd9d666ad40f5514cf1a6573211629cd16d91514667d132808cf3cc6f41f07c911e045e2e85354d3a08dadd98a3caafdbf07052e2dd8de760c2df37979cb8
-
SSDEEP
768:5t0B4XDrqpMJAF+aN7GoxY7h/+URBl9NHKgIBQ2NZfB+5:v0aKCAFfmt/+UHO7LfM5
Malware Config
Extracted
https://raw.githubusercontent.com/KDot227/Powershell-Token-Grabber/main/builder.ps1
https://raw.githubusercontent.com/KDot227/Powershell-Token-Grabber/main/main.
https://raw.githubusercontent.com/KDot227/Powershell-Token-Grabber/main/builder.ps1
https://github.com/KDot227/Somalifuscator/archive/refs/heads/main.zip
Signatures
Files
-
Powershell-Token-Grabber-main.zip.zip
-
Powershell-Token-Grabber-main/.gitignore
-
Powershell-Token-Grabber-main/.vscode/PSScriptAnalyzerSettings.psd1
-
Powershell-Token-Grabber-main/.vscode/settings.json
-
Powershell-Token-Grabber-main/LICENSE
-
Powershell-Token-Grabber-main/README.md.ps1
-
Powershell-Token-Grabber-main/builder.bat
-
Powershell-Token-Grabber-main/builder.ps1.ps1
-
Powershell-Token-Grabber-main/injection.js.js
-
Powershell-Token-Grabber-main/main.bat
-
Powershell-Token-Grabber-main/main.ps1.ps1
-
Powershell-Token-Grabber-main/main.py
-
Powershell-Token-Grabber-main/requirements.txt
-
Powershell-Token-Grabber-main/util/functions.ps1.ps1