Overview
overview
10Static
static
10Grabbers-D...in.zip
windows7-x64
1Grabbers-D...in.zip
windows10-2004-x64
1Grabbers-D...obf.py
windows7-x64
3Grabbers-D...obf.py
windows10-2004-x64
3Grabbers-D...ben.py
windows7-x64
3Grabbers-D...ben.py
windows10-2004-x64
3Grabbers-D...ank.py
windows7-x64
3Grabbers-D...ank.py
windows10-2004-x64
3Grabbers-D...ean.py
windows7-x64
3Grabbers-D...ean.py
windows10-2004-x64
3Grabbers-D...una.py
windows7-x64
3Grabbers-D...una.py
windows10-2004-x64
3Grabbers-D...obf.py
windows7-x64
3Grabbers-D...obf.py
windows10-2004-x64
3Grabbers-D...her.py
windows7-x64
3Grabbers-D...her.py
windows10-2004-x64
3Grabbers-D...ts.txt
windows7-x64
1Grabbers-D...ts.txt
windows10-2004-x64
1Grabbers-D...al.gif
windows7-x64
1Grabbers-D...al.gif
windows10-2004-x64
1Grabbers-D...er.jar
windows7-x64
1Grabbers-D...er.jar
windows10-2004-x64
7Grabbers-D...pycdas
ubuntu-22.04-amd64
1Grabbers-D...as.exe
windows7-x64
1Grabbers-D...as.exe
windows10-2004-x64
1Grabbers-D.../pycdc
ubuntu-24.04-amd64
1Grabbers-D...dc.exe
windows7-x64
1Grabbers-D...dc.exe
windows10-2004-x64
1Grabbers-D...in/upx
ubuntu-24.04-amd64
1Grabbers-D...px.exe
windows7-x64
7Grabbers-D...px.exe
windows10-2004-x64
7Grabbers-D...fig.py
windows7-x64
3Analysis
-
max time kernel
1794s -
max time network
1799s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
31/05/2024, 17:34
Behavioral task
behavioral1
Sample
Grabbers-Deobfuscator-main.zip
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Grabbers-Deobfuscator-main.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Grabbers-Deobfuscator-main/deobf.py
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
Grabbers-Deobfuscator-main/deobf.py
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Grabbers-Deobfuscator-main/methods/ben.py
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
Grabbers-Deobfuscator-main/methods/ben.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Grabbers-Deobfuscator-main/methods/blank.py
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Grabbers-Deobfuscator-main/methods/blank.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Grabbers-Deobfuscator-main/methods/empyrean.py
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
Grabbers-Deobfuscator-main/methods/empyrean.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Grabbers-Deobfuscator-main/methods/luna.py
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Grabbers-Deobfuscator-main/methods/luna.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Grabbers-Deobfuscator-main/methods/notobf.py
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
Grabbers-Deobfuscator-main/methods/notobf.py
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
Grabbers-Deobfuscator-main/methods/other.py
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
Grabbers-Deobfuscator-main/methods/other.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
Grabbers-Deobfuscator-main/requirements.txt
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Grabbers-Deobfuscator-main/requirements.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Grabbers-Deobfuscator-main/tutorial.gif
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Grabbers-Deobfuscator-main/tutorial.gif
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Grabbers-Deobfuscator-main/utils/bin/fernflower.jar
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Grabbers-Deobfuscator-main/utils/bin/fernflower.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Grabbers-Deobfuscator-main/utils/bin/pycdas
Resource
ubuntu2204-amd64-20240522-en
Behavioral task
behavioral24
Sample
Grabbers-Deobfuscator-main/utils/bin/pycdas.exe
Resource
win7-20240215-en
Behavioral task
behavioral25
Sample
Grabbers-Deobfuscator-main/utils/bin/pycdas.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral26
Sample
Grabbers-Deobfuscator-main/utils/bin/pycdc
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral27
Sample
Grabbers-Deobfuscator-main/utils/bin/pycdc.exe
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
Grabbers-Deobfuscator-main/utils/bin/pycdc.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
Grabbers-Deobfuscator-main/utils/bin/upx
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral30
Sample
Grabbers-Deobfuscator-main/utils/bin/upx.exe
Resource
win7-20240221-en
Behavioral task
behavioral31
Sample
Grabbers-Deobfuscator-main/utils/bin/upx.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral32
Sample
Grabbers-Deobfuscator-main/utils/config.py
Resource
win7-20240221-en
General
-
Target
Grabbers-Deobfuscator-main/utils/bin/pycdas.exe
-
Size
124KB
-
MD5
c106613cf4fc594260ced59577936bfa
-
SHA1
8a16fdacd947e6a8fedebde1c1eaf2ff899c6f37
-
SHA256
52370a2d59198239421954e1cb46284218d3c8ba70a1c161d2b5ab1cc7ed4d96
-
SHA512
55d24e2babed9fc81c53ca452d720911628001a9da24b156cc2560b0b8c3461058fd90da5ca0bbfd36c6fb4f985887535aad18a4bf7d9b199b2afdb32ddd4247
-
SSDEEP
1536:PAXQ0AJO9eYJpPPuPZgkP8MqzjWdwsa8XKIilFRvrfS1l+YlDlT:41B9eYJpHuj8Mqz6dZv6IilFhYl+YD
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Grabbers-Deobfuscator-main\utils\bin\pycdas.exe"C:\Users\Admin\AppData\Local\Temp\Grabbers-Deobfuscator-main\utils\bin\pycdas.exe"1⤵PID:4704
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4168,i,1697479186275492802,18058102846092193784,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:81⤵PID:4328
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4740,i,1697479186275492802,18058102846092193784,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:81⤵PID:4760