Overview

overview

8

Static

static

8

Rose-Grabb...er.bat

windows7-x64

1

Rose-Grabb...er.bat

windows10-2004-x64

1

Rose-Grabb...ion.js

windows7-x64

1

Rose-Grabb...ion.js

windows10-2004-x64

1

Rose-Grabb...ctX.py

windows7-x64

3

Rose-Grabb...ctX.py

windows10-2004-x64

3

Rose-Grabb...ile.py

windows7-x64

3

Rose-Grabb...ile.py

windows10-2004-x64

3

Rose-Grabb...ing.py

windows7-x64

3

Rose-Grabb...ing.py

windows10-2004-x64

3

Rose-Grabb...lox.py

windows7-x64

3

Rose-Grabb...lox.py

windows10-2004-x64

3

Rose-Grabb...tup.py

windows7-x64

3

Rose-Grabb...tup.py

windows10-2004-x64

3

Rose-Grabb...ook.py

windows7-x64

3

Rose-Grabb...ook.py

windows10-2004-x64

3

Rose-Grabb...ivm.py

windows7-x64

3

Rose-Grabb...ivm.py

windows10-2004-x64

3

Rose-Grabb...tes.py

windows7-x64

3

Rose-Grabb...tes.py

windows10-2004-x64

3

Rose-Grabb...ser.py

windows7-x64

3

Rose-Grabb...ser.py

windows10-2004-x64

3

Rose-Grabb...fig.py

windows7-x64

3

Rose-Grabb...fig.py

windows10-2004-x64

3

Rose-Grabb...ner.py

windows7-x64

3

Rose-Grabb...ner.py

windows10-2004-x64

3

Rose-Grabb...rdc.py

windows7-x64

3

Rose-Grabb...rdc.py

windows10-2004-x64

3

Rose-Grabb...are.py

windows7-x64

3

Rose-Grabb...are.py

windows10-2004-x64

3

Rose-Grabb...mes.py

windows7-x64

3

Rose-Grabb...mes.py

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2a54203285592e12ee95f43a0f45393.bin

  • Size

    802KB

  • MD5

    e2a54203285592e12ee95f43a0f45393

  • SHA1

    212d7326b10ac86649fd3c3720f454a0a21dfe06

  • SHA256

    97fc9ca5e07295a9d9d91b8808a6a30e302fb66f7cc103aaf87501d8f8fb54ad

  • SHA512

    edafb0d4a555e79d5aeab326f70eb467513708eda3e6f0d2e1a897b35e48c73e895a8d983c323fbf4bd3673dfa365761fa4e02f4b38869d35d3b75982329560a

  • SSDEEP

    12288:Y6pFvC1qj9wJtFx8qNzH/xDryJQzElz1j3VD9bLPWBJQsGrY4zRBT:Y6pFqZx/NfRWaAh5D9bLW37Gr9j

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e2a54203285592e12ee95f43a0f45393.bin
    .zip

    Password: infected

  • Rose-Grabber-main/.bandit
  • Rose-Grabber-main/.deepsource.toml
  • Rose-Grabber-main/.github/ISSUE_TEMPLATE/bug_report.md
  • Rose-Grabber-main/.github/ISSUE_TEMPLATE/feature_request.md
  • Rose-Grabber-main/.gitignore
  • Rose-Grabber-main/LICENSE
  • Rose-Grabber-main/README.md
  • Rose-Grabber-main/builder.bat
    .bat .vbs
  • Rose-Grabber-main/docs/CHANGELOG.md
  • Rose-Grabber-main/docs/FEATURES.md
  • Rose-Grabber-main/docs/PREVIEW.md
  • Rose-Grabber-main/resources/assets/Rose.ico
  • Rose-Grabber-main/resources/assets/Rose.png
    .png

    Password: infected

  • Rose-Grabber-main/resources/assets/RoseLoadingScreen.mp4
  • Rose-Grabber-main/resources/assets/Roses.ico
  • Rose-Grabber-main/resources/assets/executable.ico
  • Rose-Grabber-main/resources/assets/roseb.png
    .png

    Password: infected

  • Rose-Grabber-main/resources/assets/rosebb.png
    .jpg

    Password: infected

  • Rose-Grabber-main/resources/data/injection.js
    .js
  • Rose-Grabber-main/resources/data/requirements.txt
  • Rose-Grabber-main/resources/source/bin/InjectX.py
  • Rose-Grabber-main/resources/source/bin/_file.py
  • Rose-Grabber-main/resources/source/bin/_random_string.py
  • Rose-Grabber-main/resources/source/bin/_roblox.py
  • Rose-Grabber-main/resources/source/bin/_startup.py
  • Rose-Grabber-main/resources/source/bin/_webhook.py
  • Rose-Grabber-main/resources/source/bin/antivm.py
  • Rose-Grabber-main/resources/source/bin/block_sites.py
  • Rose-Grabber-main/resources/source/bin/browser.py
  • Rose-Grabber-main/resources/source/bin/config.py
  • Rose-Grabber-main/resources/source/bin/crypto_miner.py
  • Rose-Grabber-main/resources/source/bin/discordc.py
  • Rose-Grabber-main/resources/source/bin/doggo_ransomware.py
  • Rose-Grabber-main/resources/source/bin/games.py
  • Rose-Grabber-main/resources/source/bin/ipinf.py
  • Rose-Grabber-main/resources/source/bin/knight_rat.py
  • Rose-Grabber-main/resources/source/bin/rose_rat.py
  • Rose-Grabber-main/resources/source/bin/sysinf.py
  • Rose-Grabber-main/resources/source/bin/tbsod.py
  • Rose-Grabber-main/resources/source/bin/uac_bypass.py
  • Rose-Grabber-main/resources/source/bin/webhook.py
  • Rose-Grabber-main/resources/source/main.py
  • Rose-Grabber-main/resources/ui/builder.py
  • Rose-Grabber-main/resources/ui/msg.txt
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/COPYING
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/LICENSE
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/NEWS
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/README
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/THANKS.txt
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/upx-doc.html
    .html .vbs
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/upx-doc.txt
    .vbs
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/upx.1
    .vbs
  • Rose-Grabber-main/resources/ui/upx-4.1.0-win64/upx.exe
    .exe windows:4 windows x64 arch:x64

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Rose-Grabber-main/resources/utils/convert_color.py
  • Rose-Grabber-main/resources/utils/doggo-decrypter.py
  • Rose-Grabber-main/resources/utils/rose_builder.pyw
  • Rose-Grabber-main/resources/utils/unblock_sites-by-blank.py
  • Rose-Grabber-main/setup.cfg
  • Rose-Grabber-main/tox.ini