Overview

overview

8

Static

static

8

Rose-Grabb...er.bat

windows7-x64

1

Rose-Grabb...er.bat

windows10-2004-x64

1

Rose-Grabb...ion.js

windows7-x64

1

Rose-Grabb...ion.js

windows10-2004-x64

1

Rose-Grabb...ctX.py

windows7-x64

3

Rose-Grabb...ctX.py

windows10-2004-x64

3

Rose-Grabb...ile.py

windows7-x64

3

Rose-Grabb...ile.py

windows10-2004-x64

3

Rose-Grabb...ing.py

windows7-x64

3

Rose-Grabb...ing.py

windows10-2004-x64

3

Rose-Grabb...lox.py

windows7-x64

3

Rose-Grabb...lox.py

windows10-2004-x64

3

Rose-Grabb...tup.py

windows7-x64

3

Rose-Grabb...tup.py

windows10-2004-x64

3

Rose-Grabb...ook.py

windows7-x64

3

Rose-Grabb...ook.py

windows10-2004-x64

3

Rose-Grabb...ivm.py

windows7-x64

3

Rose-Grabb...ivm.py

windows10-2004-x64

3

Rose-Grabb...tes.py

windows7-x64

3

Rose-Grabb...tes.py

windows10-2004-x64

3

Rose-Grabb...ser.py

windows7-x64

3

Rose-Grabb...ser.py

windows10-2004-x64

3

Rose-Grabb...fig.py

windows7-x64

3

Rose-Grabb...fig.py

windows10-2004-x64

3

Rose-Grabb...ner.py

windows7-x64

3

Rose-Grabb...ner.py

windows10-2004-x64

3

Rose-Grabb...rdc.py

windows7-x64

3

Rose-Grabb...rdc.py

windows10-2004-x64

3

Rose-Grabb...are.py

windows7-x64

3

Rose-Grabb...are.py

windows10-2004-x64

3

Rose-Grabb...mes.py

windows7-x64

3

Rose-Grabb...mes.py

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5d1593059664ac21b0f06fe23881558.bin

  • Size

    762KB

  • MD5

    f5d1593059664ac21b0f06fe23881558

  • SHA1

    8ae62f915e9c71ac1923c3455c2e3835df8d1841

  • SHA256

    8cf5721027d2b5a40ed7ac8bf096cef57a63e706eb0147fbaf8cf2f1a39c66ea

  • SHA512

    0cb6868a141b6bfcd53dc7c56c1808a1f2af88e17e55fdc4330136399adf99a51932617a323738db3d4000782326fc638a63c9c210eb2ee7ecae70c8d1e78248

  • SSDEEP

    12288:SmxpFv11qN9J5q3pG/xDryJQzElz1j3VD9bLPWBJQsGrY4zRBR:SmxpFtq85KRWaAh5D9bLW37Gr9B

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f5d1593059664ac21b0f06fe23881558.bin
    .zip

    Password: infected

  • Rose-Grabber-main/.bandit
  • Rose-Grabber-main/.deepsource.toml
  • Rose-Grabber-main/.github/ISSUE_TEMPLATE/bug_report.md
  • Rose-Grabber-main/.github/ISSUE_TEMPLATE/feature_request.md
  • Rose-Grabber-main/.gitignore
  • Rose-Grabber-main/LICENSE
  • Rose-Grabber-main/README.md
  • Rose-Grabber-main/builder.bat
    .bat .vbs
  • Rose-Grabber-main/docs/CHANGELOG.md
  • Rose-Grabber-main/docs/FEATURES.md
  • Rose-Grabber-main/docs/PREVIEW.md
  • Rose-Grabber-main/resources/assets/Rose.ico
  • Rose-Grabber-main/resources/assets/Rose.png
    .png
  • Rose-Grabber-main/resources/assets/RoseLoadingScreen.mp4
  • Rose-Grabber-main/resources/assets/Roses.ico
  • Rose-Grabber-main/resources/assets/executable.ico
  • Rose-Grabber-main/resources/assets/roseb.png
    .png
  • Rose-Grabber-main/resources/data/injection.js
    .js
  • Rose-Grabber-main/resources/data/requirements.txt
  • Rose-Grabber-main/resources/source/bin/InjectX.py
  • Rose-Grabber-main/resources/source/bin/_file.py
  • Rose-Grabber-main/resources/source/bin/_random_string.py
  • Rose-Grabber-main/resources/source/bin/_roblox.py
  • Rose-Grabber-main/resources/source/bin/_startup.py
  • Rose-Grabber-main/resources/source/bin/_webhook.py
  • Rose-Grabber-main/resources/source/bin/antivm.py
  • Rose-Grabber-main/resources/source/bin/block_sites.py
  • Rose-Grabber-main/resources/source/bin/browser.py
  • Rose-Grabber-main/resources/source/bin/config.py
  • Rose-Grabber-main/resources/source/bin/crypto_miner.py
  • Rose-Grabber-main/resources/source/bin/discordc.py
  • Rose-Grabber-main/resources/source/bin/doggo_ransomware.py
  • Rose-Grabber-main/resources/source/bin/games.py
  • Rose-Grabber-main/resources/source/bin/ipinf.py
  • Rose-Grabber-main/resources/source/bin/knight_rat.py
  • Rose-Grabber-main/resources/source/bin/rose_rat.py
  • Rose-Grabber-main/resources/source/bin/sysinf.py
  • Rose-Grabber-main/resources/source/bin/tbsod.py
  • Rose-Grabber-main/resources/source/bin/uac_bypass.py
  • Rose-Grabber-main/resources/source/bin/webhook.py
  • Rose-Grabber-main/resources/source/main.py
  • Rose-Grabber-main/resources/ui/builder.py
  • Rose-Grabber-main/resources/ui/msg.txt
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/COPYING
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/LICENSE
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/NEWS
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/README
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/THANKS.txt
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/upx-doc.html
    .html .vbs
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/upx-doc.txt
    .vbs
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/upx.1
    .vbs
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/upx.exe
    .exe windows:4 windows x64

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64


    Headers

    Sections

  • Rose-Grabber-main/resources/utils/convert_color.py
  • Rose-Grabber-main/resources/utils/doggo-decrypter.py
  • Rose-Grabber-main/resources/utils/rose_builder.pyw
  • Rose-Grabber-main/resources/utils/unblock_sites-by-blank.py
  • Rose-Grabber-main/setup.cfg
  • Rose-Grabber-main/tox.ini