Overview
overview
7Static
static
3Proxy Grab...rp.dll
windows7-x64
1Proxy Grab...rp.dll
windows10-2004-x64
1Proxy Grab...ic.dll
windows7-x64
1Proxy Grab...ic.dll
windows10-2004-x64
1Proxy Grab...er.exe
windows7-x64
7Proxy Grab...er.exe
windows10-2004-x64
7Proxy Grab...rp.dll
windows7-x64
1Proxy Grab...rp.dll
windows10-2004-x64
1Proxy Grab...or.exe
windows7-x64
3Proxy Grab...or.exe
windows10-2004-x64
7Proxy Grab...st.exe
windows7-x64
3Proxy Grab...st.exe
windows10-2004-x64
7Proxy Grab...ic.dll
windows7-x64
1Proxy Grab...ic.dll
windows10-2004-x64
1Proxy Grab...32.exe
windows7-x64
1Proxy Grab...32.exe
windows10-2004-x64
1Proxy Grab...ht.dll
windows7-x64
1Proxy Grab...ht.dll
windows10-2004-x64
1Proxy Grab...ht.dll
windows7-x64
1Proxy Grab...ht.dll
windows10-2004-x64
1Analysis
-
max time kernel
147s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28/03/2024, 11:18 UTC
Static task
static1
Behavioral task
behavioral1
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/AngleSharp.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/AngleSharp.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/Microsoft.Dynamic.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/Microsoft.Dynamic.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/Proxy Grabber by Mathian Developer.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/Proxy Grabber by Mathian Developer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/AngleSharp.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/AngleSharp.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/Microsoft Windows Protocol Monitor.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/Microsoft Windows Protocol Monitor.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/Microsoft Windows Protocol Services Host.exe
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/Microsoft Windows Protocol Services Host.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/Microsoft.Dynamic.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/Microsoft.Dynamic.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/dev32.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/dev32.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/mfc100cht.dll
Resource
win7-20240319-en
Behavioral task
behavioral18
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/data/mfc100cht.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/mfc100cht.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Proxy Grabber by Mathian/Proxy Grabber by Mathian/mfc100cht.dll
Resource
win10v2004-20240226-en
General
-
Target
Proxy Grabber by Mathian/Proxy Grabber by Mathian/mfc100cht.dll
-
Size
36KB
-
MD5
61a56eb574daa6ceab692f98be3e5bb6
-
SHA1
b52aa36e1a2594fe0ac97ee0b867df822d223b76
-
SHA256
928f0528706576c2f7211e98462e87e03bfc14eb7a84ca3531f45ce1d9f080a3
-
SHA512
0b787be453e7d55b810e3075ab96e9f07a7f4a10d34c9082f17c26db0578a7199ddfccf1749c87c97541f9484908e59b1a237361b92123f98880dc5835173124
-
SSDEEP
384:m1cPmgt96DteT9X2IEI41W4WA1G/7kn4TJgUqJgM3KbgkE3H+iihZ2+10vq0GftC:muufpTVI4P+7kn4TJVM3i/EhK2iex
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request133.211.185.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request40.134.221.88.in-addr.arpaIN PTRResponse40.134.221.88.in-addr.arpaIN PTRa88-221-134-40deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request140.32.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request241.150.49.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request178.223.142.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request228.249.119.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request26.165.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request56.126.166.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request217.135.221.88.in-addr.arpaIN PTRResponse217.135.221.88.in-addr.arpaIN PTRa88-221-135-217deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request41.134.221.88.in-addr.arpaIN PTRResponse41.134.221.88.in-addr.arpaIN PTRa88-221-134-41deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request13.227.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request152.141.79.40.in-addr.arpaIN PTRResponse
-
73 B 147 B 1 1
DNS Request
133.211.185.52.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
40.134.221.88.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
140.32.126.40.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
241.150.49.20.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
178.223.142.52.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
228.249.119.40.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
26.165.165.52.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
56.126.166.20.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
217.135.221.88.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
41.134.221.88.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
13.227.111.52.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
152.141.79.40.in-addr.arpa