Overview
overview
10Static
static
10Powershell...ME.ps1
windows7-x64
1Powershell...ME.ps1
windows10-2004-x64
1Powershell...er.bat
windows7-x64
8Powershell...er.bat
windows10-2004-x64
10Powershell...er.ps1
windows7-x64
8Powershell...er.ps1
windows10-2004-x64
10Powershell...ion.js
windows7-x64
1Powershell...ion.js
windows10-2004-x64
1Powershell...in.bat
windows7-x64
1Powershell...in.bat
windows10-2004-x64
8Powershell...in.ps1
windows7-x64
1Powershell...in.ps1
windows10-2004-x64
8Powershell...ain.py
windows7-x64
3Powershell...ain.py
windows10-2004-x64
3Powershell...ns.ps1
windows7-x64
1Powershell...ns.ps1
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Powershell-Token-Grabber-4.2/README.ps1
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Powershell-Token-Grabber-4.2/README.ps1
Resource
win10v2004-20240220-en
Behavioral task
behavioral3
Sample
Powershell-Token-Grabber-4.2/builder.bat
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Powershell-Token-Grabber-4.2/builder.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
Powershell-Token-Grabber-4.2/builder.ps1
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Powershell-Token-Grabber-4.2/builder.ps1
Resource
win10v2004-20240220-en
Behavioral task
behavioral7
Sample
Powershell-Token-Grabber-4.2/injection.js
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
Powershell-Token-Grabber-4.2/injection.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
Powershell-Token-Grabber-4.2/main.bat
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
Powershell-Token-Grabber-4.2/main.bat
Resource
win10v2004-20240220-en
Behavioral task
behavioral11
Sample
Powershell-Token-Grabber-4.2/main.ps1
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
Powershell-Token-Grabber-4.2/main.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
Powershell-Token-Grabber-4.2/main.py
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
Powershell-Token-Grabber-4.2/main.py
Resource
win10v2004-20240220-en
Behavioral task
behavioral15
Sample
Powershell-Token-Grabber-4.2/util/functions.ps1
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
Powershell-Token-Grabber-4.2/util/functions.ps1
Resource
win10v2004-20231215-en
General
-
Target
Powershell-Token-Grabber-4.2.zip
-
Size
38KB
-
MD5
d33deda7ae679735fd1f279bedd044c6
-
SHA1
5eee5492b01ee13dd6e5186324b0dd0f278a970b
-
SHA256
c9db457f765e9d609a3c8a301579908c61b1dd098e3b4111e8552c231b9e14d6
-
SHA512
2c4cb67b1a479ca9faa800e302ff8c5309148c5a2c96c621b7bae6ced97bbb61652a3e6f231875cf38a12ca2a140ce696e307865ee8ebc510bfe84dd781b1335
-
SSDEEP
768:MGtRTBv4XDoqpMJAF+aN7GoxIh+jxGaOIXuAYqGYo/w0SFwXB+KrY:bhBAhCAFfGUrGJw0mwXM/
Malware Config
Extracted
https://raw.githubusercontent.com/KDot227/Powershell-Token-Grabber/main/builder.ps1
https://raw.githubusercontent.com/KDot227/Powershell-Token-Grabber/main/main.
https://raw.githubusercontent.com/KDot227/Powershell-Token-Grabber/main/builder.ps1
https://github.com/KDot227/Somalifuscator/archive/refs/heads/main.zip
Signatures
Files
-
Powershell-Token-Grabber-4.2.zip.zip
-
Powershell-Token-Grabber-4.2/.gitignore
-
Powershell-Token-Grabber-4.2/.vscode/PSScriptAnalyzerSettings.psd1
-
Powershell-Token-Grabber-4.2/.vscode/settings.json
-
Powershell-Token-Grabber-4.2/LICENSE
-
Powershell-Token-Grabber-4.2/README.md.ps1
-
Powershell-Token-Grabber-4.2/builder.bat
-
Powershell-Token-Grabber-4.2/builder.ps1.ps1
-
Powershell-Token-Grabber-4.2/injection.js.js
-
Powershell-Token-Grabber-4.2/main.bat
-
Powershell-Token-Grabber-4.2/main.ps1.ps1
-
Powershell-Token-Grabber-4.2/main.py
-
Powershell-Token-Grabber-4.2/requirements.txt
-
Powershell-Token-Grabber-4.2/util/functions.ps1.ps1