Overview
overview
10Static
static
3BlitzedGrabberX96.rar
windows10-1703-x64
3BlitzedGra...OR.dll
windows10-1703-x64
1BlitzedGra...to.dll
windows10-1703-x64
1BlitzedGra...et.dll
windows10-1703-x64
1BlitzedGra...rp.dll
windows10-1703-x64
1BlitzedGra...on.dll
windows10-1703-x64
1BlitzedGra...ta.dll
windows10-1703-x64
1BlitzedGra...le.exe
windows10-1703-x64
3BlitzedGra...af.exe
windows10-1703-x64
7BlitzedGra...er.exe
windows10-1703-x64
10BlitzedGra...ll.txt
windows10-1703-x64
1Resubmissions
07-05-2024 00:42
240507-a2ghnsde87 10Analysis
-
max time kernel
131s -
max time network
141s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
07-05-2024 00:42
Static task
static1
Behavioral task
behavioral1
Sample
BlitzedGrabberX96.rar
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
BlitzedGrabberX96/Bin/APIFOR.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
BlitzedGrabberX96/Bin/BouncyCastle.Crypto.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
BlitzedGrabberX96/Bin/Leaf.xNet.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
BlitzedGrabberX96/Bin/Microsoft.CSharp.dll
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
BlitzedGrabberX96/Bin/Newtonsoft.Json.dll
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
BlitzedGrabberX96/Bin/System.Security.Cryptography.ProtectedData.dll
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
BlitzedGrabberX96/Bin/UltraEmbeddable.exe
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
BlitzedGrabberX96/Bin/leaf.exe
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
BlitzedGrabberX96/BlitzedGrabberX96 Installer.exe
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
BlitzedGrabberX96/How To Install.txt
Resource
win10-20240404-en
General
-
Target
BlitzedGrabberX96/Bin/leaf.exe
-
Size
18KB
-
MD5
2a62b2d78f2c0f2efd39f07641d231e1
-
SHA1
30e17f27edb951a306fd907e37aacc170bf3c7be
-
SHA256
b4b1dd5fc206b0089ca1e7d613d6475a9a06bbcf4c207830d7c0cf02a94ae79a
-
SHA512
4246bb79753f803aaeef24ec6bb9f5ec23859f2cc24d3cfb58c901722cd089b98cf8a2eae6763d18f1a2a330f71887aa8dfbfbd2bb92865680c2f1135a371ca5
-
SSDEEP
384:F4DIh6WG5tV+xSjdto26g2S0olp6NaUkBq2CimESaz+kz:6DIhK3gG/6rsYjEJSkz
Malware Config
Signatures
-
Drops startup file 2 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\leaf.exe leaf.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\leaf.exe leaf.exe -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4400 leaf.exe