Overview
overview
8Static
static
8Blank-Grab...er.bat
windows11-21h2-x64
8Blank-Grab...OBF.py
windows11-21h2-x64
3Blank-Grab...10.pyc
windows11-21h2-x64
3Blank-Grab...10.pyc
windows11-21h2-x64
3Blank-Grab...10.pyc
windows11-21h2-x64
3Blank-Grab...der.py
windows11-21h2-x64
3Blank-Grab...ess.py
windows11-21h2-x64
3Blank-Grab...ess.py
windows11-21h2-x64
3Blank-Grab...ar.exe
windows11-21h2-x64
3Blank-Grab...un.bat
windows11-21h2-x64
1Blank-Grab...ief.py
windows11-21h2-x64
3Blank-Grab...tub.py
windows11-21h2-x64
3Blank-Grab...px.exe
windows11-21h2-x64
7Blank-Grab...tes.py
windows11-21h2-x64
3Blank-Grab...gui.py
windows11-21h2-x64
3Blank-Grab...er.bat
windows11-21h2-x64
1Blank-Grab...OBF.py
windows11-21h2-x64
3Blank-Grab...10.pyc
windows11-21h2-x64
3Blank-Grab...10.pyc
windows11-21h2-x64
3Blank-Grab...10.pyc
windows11-21h2-x64
3Blank-Grab...der.py
windows11-21h2-x64
3Blank-Grab...ess.py
windows11-21h2-x64
3Blank-Grab...ess.py
windows11-21h2-x64
3Blank-Grab...ar.exe
windows11-21h2-x64
3Blank-Grab...un.bat
windows11-21h2-x64
1Blank-Grab...ief.py
windows11-21h2-x64
3Blank-Grab...tub.py
windows11-21h2-x64
3Blank-Grab...px.exe
windows11-21h2-x64
7Blank-Grab...tes.py
windows11-21h2-x64
3Blank-Grab...gui.py
windows11-21h2-x64
3Resubmissions
13/07/2024, 23:11
240713-26p46asgld 813/07/2024, 20:33
240713-zb9h7swdpk 811/07/2024, 21:44
240711-1lnj6axfpd 811/07/2024, 21:32
240711-1d16aaxcrf 811/07/2024, 21:29
240711-1b5qpaxcke 811/07/2024, 21:25
240711-z9kmqsvcnm 811/07/2024, 21:22
240711-z7xvaavbrp 811/07/2024, 21:20
240711-z6q1cavbmj 811/07/2024, 21:16
240711-z4v7aawhrd 8Analysis
-
max time kernel
432s -
max time network
441s -
platform
windows11-21h2_x64 -
resource
win11-20240709-en -
resource tags
arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system -
submitted
13/07/2024, 23:11
Behavioral task
behavioral1
Sample
Blank-Grabber-main/Blank Grabber/Builder.bat
Resource
win11-20240709-en
Behavioral task
behavioral2
Sample
Blank-Grabber-main/Blank Grabber/Components/BlankOBF.py
Resource
win11-20240709-en
Behavioral task
behavioral3
Sample
Blank-Grabber-main/Blank Grabber/Components/__pycache__/BlankOBF.cpython-310.pyc
Resource
win11-20240709-en
Behavioral task
behavioral4
Sample
Blank-Grabber-main/Blank Grabber/Components/__pycache__/process.cpython-310.pyc
Resource
win11-20240709-en
Behavioral task
behavioral5
Sample
Blank-Grabber-main/Blank Grabber/Components/__pycache__/sigthief.cpython-310.pyc
Resource
win11-20240709-en
Behavioral task
behavioral6
Sample
Blank-Grabber-main/Blank Grabber/Components/loader.py
Resource
win11-20240709-en
Behavioral task
behavioral7
Sample
Blank-Grabber-main/Blank Grabber/Components/postprocess.py
Resource
win11-20240709-en
Behavioral task
behavioral8
Sample
Blank-Grabber-main/Blank Grabber/Components/process.py
Resource
win11-20240709-en
Behavioral task
behavioral9
Sample
Blank-Grabber-main/Blank Grabber/Components/rar.exe
Resource
win11-20240709-en
Behavioral task
behavioral10
Sample
Blank-Grabber-main/Blank Grabber/Components/run.bat
Resource
win11-20240709-en
Behavioral task
behavioral11
Sample
Blank-Grabber-main/Blank Grabber/Components/sigthief.py
Resource
win11-20240709-en
Behavioral task
behavioral12
Sample
Blank-Grabber-main/Blank Grabber/Components/stub.py
Resource
win11-20240709-en
Behavioral task
behavioral13
Sample
Blank-Grabber-main/Blank Grabber/Components/upx.exe
Resource
win11-20240709-en
Behavioral task
behavioral14
Sample
Blank-Grabber-main/Blank Grabber/Extras/unblock_sites.py
Resource
win11-20240709-en
Behavioral task
behavioral15
Sample
Blank-Grabber-main/Blank Grabber/gui.py
Resource
win11-20240709-en
Behavioral task
behavioral16
Sample
Blank-Grabber-main/grabb/Builder.bat
Resource
win11-20240709-en
Behavioral task
behavioral17
Sample
Blank-Grabber-main/grabb/Components/BlankOBF.py
Resource
win11-20240709-en
Behavioral task
behavioral18
Sample
Blank-Grabber-main/grabb/Components/__pycache__/BlankOBF.cpython-310.pyc
Resource
win11-20240709-en
Behavioral task
behavioral19
Sample
Blank-Grabber-main/grabb/Components/__pycache__/process.cpython-310.pyc
Resource
win11-20240709-en
Behavioral task
behavioral20
Sample
Blank-Grabber-main/grabb/Components/__pycache__/sigthief.cpython-310.pyc
Resource
win11-20240709-en
Behavioral task
behavioral21
Sample
Blank-Grabber-main/grabb/Components/loader.py
Resource
win11-20240709-en
Behavioral task
behavioral22
Sample
Blank-Grabber-main/grabb/Components/postprocess.py
Resource
win11-20240709-en
Behavioral task
behavioral23
Sample
Blank-Grabber-main/grabb/Components/process.py
Resource
win11-20240709-en
Behavioral task
behavioral24
Sample
Blank-Grabber-main/grabb/Components/rar.exe
Resource
win11-20240709-en
Behavioral task
behavioral25
Sample
Blank-Grabber-main/grabb/Components/run.bat
Resource
win11-20240709-en
Behavioral task
behavioral26
Sample
Blank-Grabber-main/grabb/Components/sigthief.py
Resource
win11-20240709-en
Behavioral task
behavioral27
Sample
Blank-Grabber-main/grabb/Components/stub.py
Resource
win11-20240709-en
Behavioral task
behavioral28
Sample
Blank-Grabber-main/grabb/Components/upx.exe
Resource
win11-20240709-en
Behavioral task
behavioral29
Sample
Blank-Grabber-main/grabb/Extras/unblock_sites.py
Resource
win11-20240709-en
Behavioral task
behavioral30
Sample
Blank-Grabber-main/grabb/gui.py
Resource
win11-20240709-en
General
-
Target
Blank-Grabber-main/grabb/Builder.bat
-
Size
1KB
-
MD5
69f3538d09da509b93329b22fd59a956
-
SHA1
d74ccc96102895e111712beedabcdc725fb23360
-
SHA256
79e1377ac17e6aece067d4cf6a202d8baf43a9906cea353de7188c43b20500c8
-
SHA512
a5e2fdeb2d185acda43e6a0d964966fc5246d2fe598d094e0b59bd757c42170d3e4125cf7da736080a95141b453d12a53af295eb53bd64e431285e8213da9b07
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4988 wrote to memory of 4676 4988 cmd.exe 83 PID 4988 wrote to memory of 4676 4988 cmd.exe 83 PID 4988 wrote to memory of 4676 4988 cmd.exe 83
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Blank-Grabber-main\grabb\Builder.bat"1⤵
- Suspicious use of WriteProcessMemory
PID:4988 -
C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.42251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exepython --version2⤵PID:4676
-