Analysis
-
max time kernel
614s -
max time network
1176s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-de -
resource tags
-
submitted
06-03-2024 14:48
General
-
Target
Blank-Grabber-main/Blank Grabber/Components/run.bat
-
Size
1KB
-
MD5
5beaf38a2e57c2813f6b19b3fb08aca3
-
SHA1
424b0ae28d3ea1e067e8c29d45f1f84040eaa7ec
-
SHA256
ceade703cb46e78226dc0331ea37f3ed9f681b5969b56ddd15ca5a39e8c067d3
-
SHA512
7265b1a73f2d4841b62aec2f1eeb14114051f5b09fa47049ebb0a39ae220bdf35e747c98467aa56be8fc90aa7102888ce215edc88a52212b26ee915fdbe2d486
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Blank-Grabber-main\Blank Grabber\Components\run.bat"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD589ce837b2fa849ceaa35c66298b00e85
SHA160e82051d5d6181ec5c97923d3b345c8c3910c85
SHA25652716ae0a5b78781c62c0f8427af463a10046c079a5ff11907919499612f997e
SHA51240fe4666d1e4b9e3522163c87519fd47ecf5fc744943d79776600485d93dc7476d3085e2bc142c211f4134fb98ac2a8ab40518f130a16b155bc291c14d892704
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB