Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
8Blank-Grab...er.bat
windows7-x64
1Blank-Grab...er.bat
windows10-2004-x64
1Blank-Grab...OBF.py
windows7-x64
3Blank-Grab...OBF.py
windows10-2004-x64
3Blank-Grab...der.py
windows7-x64
3Blank-Grab...der.py
windows10-2004-x64
3Blank-Grab...ess.py
windows7-x64
3Blank-Grab...ess.py
windows10-2004-x64
3Blank-Grab...ess.py
windows7-x64
3Blank-Grab...ess.py
windows10-2004-x64
3Blank-Grab...ar.exe
windows7-x64
3Blank-Grab...ar.exe
windows10-2004-x64
3Blank-Grab...un.bat
windows7-x64
1Blank-Grab...un.bat
windows10-2004-x64
1Blank-Grab...ief.py
ubuntu-18.04-amd64
1Blank-Grab...ief.py
debian-9-armhf
1Blank-Grab...ief.py
debian-9-mips
1Blank-Grab...ief.py
debian-9-mipsel
1Blank-Grab...tub.py
windows7-x64
3Blank-Grab...tub.py
windows10-2004-x64
3Blank-Grab...px.exe
windows7-x64
7Blank-Grab...px.exe
windows10-2004-x64
7Blank-Grab...tes.py
windows7-x64
3Blank-Grab...tes.py
windows10-2004-x64
3Blank-Grab...gui.py
windows7-x64
3Blank-Grab...gui.py
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05/03/2024, 20:12
Behavioral task
behavioral1
Sample
Blank-Grabber-main/Blank Grabber/Builder.bat
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Blank-Grabber-main/Blank Grabber/Builder.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Blank-Grabber-main/Blank Grabber/Components/BlankOBF.py
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Blank-Grabber-main/Blank Grabber/Components/BlankOBF.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Blank-Grabber-main/Blank Grabber/Components/loader.py
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Blank-Grabber-main/Blank Grabber/Components/loader.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Blank-Grabber-main/Blank Grabber/Components/postprocess.py
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Blank-Grabber-main/Blank Grabber/Components/postprocess.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Blank-Grabber-main/Blank Grabber/Components/process.py
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Blank-Grabber-main/Blank Grabber/Components/process.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Blank-Grabber-main/Blank Grabber/Components/rar.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Blank-Grabber-main/Blank Grabber/Components/rar.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Blank-Grabber-main/Blank Grabber/Components/run.bat
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Blank-Grabber-main/Blank Grabber/Components/run.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Blank-Grabber-main/Blank Grabber/Components/sigthief.py
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral16
Sample
Blank-Grabber-main/Blank Grabber/Components/sigthief.py
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral17
Sample
Blank-Grabber-main/Blank Grabber/Components/sigthief.py
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral18
Sample
Blank-Grabber-main/Blank Grabber/Components/sigthief.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral19
Sample
Blank-Grabber-main/Blank Grabber/Components/stub.py
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Blank-Grabber-main/Blank Grabber/Components/stub.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Blank-Grabber-main/Blank Grabber/Components/upx.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Blank-Grabber-main/Blank Grabber/Components/upx.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Blank-Grabber-main/Blank Grabber/Extras/unblock_sites.py
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Blank-Grabber-main/Blank Grabber/Extras/unblock_sites.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Blank-Grabber-main/Blank Grabber/gui.py
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Blank-Grabber-main/Blank Grabber/gui.py
Resource
win10v2004-20240226-en
General
-
Target
Blank-Grabber-main/Blank Grabber/Builder.bat
-
Size
1KB
-
MD5
69f3538d09da509b93329b22fd59a956
-
SHA1
d74ccc96102895e111712beedabcdc725fb23360
-
SHA256
79e1377ac17e6aece067d4cf6a202d8baf43a9906cea353de7188c43b20500c8
-
SHA512
a5e2fdeb2d185acda43e6a0d964966fc5246d2fe598d094e0b59bd757c42170d3e4125cf7da736080a95141b453d12a53af295eb53bd64e431285e8213da9b07
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Blank-Grabber-main\Blank Grabber\Builder.bat"1⤵PID:4144
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4172 --field-trial-handle=2588,i,14229658658073991926,6938034815163866135,262144 --variations-seed-version /prefetch:81⤵PID:4912