Overview
overview
8Static
static
8Blank-Grab...in.zip
windows7-x64
1Blank-Grab...in.zip
windows10-2004-x64
1Blank-Grab...ge.png
windows7-x64
3Blank-Grab...ge.png
windows10-2004-x64
3Blank-Grab...sh.yml
windows7-x64
3Blank-Grab...sh.yml
windows10-2004-x64
3Blank-Grab...er.bat
windows7-x64
1Blank-Grab...er.bat
windows10-2004-x64
1Blank-Grab...OBF.py
windows7-x64
3Blank-Grab...OBF.py
windows10-2004-x64
3Blank-Grab...s/cert
windows7-x64
1Blank-Grab...s/cert
windows10-2004-x64
1Blank-Grab...g.json
windows7-x64
3Blank-Grab...g.json
windows10-2004-x64
3Blank-Grab...der.py
windows7-x64
3Blank-Grab...der.py
windows10-2004-x64
3Blank-Grab...ess.py
windows7-x64
3Blank-Grab...ess.py
windows10-2004-x64
3Blank-Grab...ess.py
windows7-x64
3Blank-Grab...ess.py
windows10-2004-x64
3Blank-Grab...ar.exe
windows7-x64
3Blank-Grab...ar.exe
windows10-2004-x64
3Blank-Grab...eg.key
windows7-x64
3Blank-Grab...eg.key
windows10-2004-x64
3Blank-Grab...ts.txt
windows7-x64
1Blank-Grab...ts.txt
windows10-2004-x64
1Blank-Grab...un.bat
windows7-x64
1Blank-Grab...un.bat
windows10-2004-x64
1Blank-Grab...ief.py
ubuntu-18.04-amd64
1Blank-Grab...ief.py
debian-9-armhf
1Blank-Grab...ief.py
debian-9-mips
1Blank-Grab...ief.py
debian-9-mipsel
1Analysis
-
max time kernel
1795s -
max time network
1801s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
06/07/2024, 13:27
Behavioral task
behavioral1
Sample
Blank-Grabber-main.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Blank-Grabber-main.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Blank-Grabber-main/.github/workflows/image.png
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Blank-Grabber-main/.github/workflows/image.png
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
Blank-Grabber-main/.github/workflows/update-hash.yml
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Blank-Grabber-main/.github/workflows/update-hash.yml
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
Blank-Grabber-main/Blank Grabber/Builder.bat
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Blank-Grabber-main/Blank Grabber/Builder.bat
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
Blank-Grabber-main/Blank Grabber/Components/BlankOBF.py
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Blank-Grabber-main/Blank Grabber/Components/BlankOBF.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Blank-Grabber-main/Blank Grabber/Components/cert
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Blank-Grabber-main/Blank Grabber/Components/cert
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
Blank-Grabber-main/Blank Grabber/Components/config.json
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Blank-Grabber-main/Blank Grabber/Components/config.json
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
Blank-Grabber-main/Blank Grabber/Components/loader.py
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Blank-Grabber-main/Blank Grabber/Components/loader.py
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
Blank-Grabber-main/Blank Grabber/Components/postprocess.py
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Blank-Grabber-main/Blank Grabber/Components/postprocess.py
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
Blank-Grabber-main/Blank Grabber/Components/process.py
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Blank-Grabber-main/Blank Grabber/Components/process.py
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
Blank-Grabber-main/Blank Grabber/Components/rar.exe
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
Blank-Grabber-main/Blank Grabber/Components/rar.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
Blank-Grabber-main/Blank Grabber/Components/rarreg.key
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
Blank-Grabber-main/Blank Grabber/Components/rarreg.key
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
Blank-Grabber-main/Blank Grabber/Components/requirements.txt
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
Blank-Grabber-main/Blank Grabber/Components/requirements.txt
Resource
win10v2004-20240704-en
Behavioral task
behavioral27
Sample
Blank-Grabber-main/Blank Grabber/Components/run.bat
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
Blank-Grabber-main/Blank Grabber/Components/run.bat
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
Blank-Grabber-main/Blank Grabber/Components/sigthief.py
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral30
Sample
Blank-Grabber-main/Blank Grabber/Components/sigthief.py
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral31
Sample
Blank-Grabber-main/Blank Grabber/Components/sigthief.py
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral32
Sample
Blank-Grabber-main/Blank Grabber/Components/sigthief.py
Resource
debian9-mipsel-20240418-en
General
-
Target
Blank-Grabber-main/.github/workflows/image.png
-
Size
338KB
-
MD5
f8262f15edbf09c8c1468a044721f58f
-
SHA1
1746570cee010eec6e647091bf5fa0e6a73d827c
-
SHA256
82de6192b19aa090d932997b3e243fee5c2351181b282e238aebd505833fdd03
-
SHA512
b148f152706a1d87508d22631c0555d665328be6c4320bb97cc0700b16327e034c963c72a1b6c8babe66493eab687534cef63bfb9d0fdd74a1653ad2afeff2e1
-
SSDEEP
6144:keRxuXvX7NMXcFkfvNz9X36aE8gdfJUAgiKqJnGSYVXIXdDEJQfUjC2bTau94Z:kz/xMs8X37EhdfJhHyNINDEodFlZ
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Blank-Grabber-main\.github\workflows\image.png1⤵PID:520
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3872,i,5095735526234624271,6356691058050835509,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:81⤵PID:3648
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4084,i,5095735526234624271,6356691058050835509,262144 --variations-seed-version --mojo-platform-channel-handle=1384 /prefetch:81⤵PID:4128