General

  • Target

    Grabber_3.2.0.exe

  • Size

    7.6MB

  • Sample

    240905-nmvcwazhmd

  • MD5

    cabcf8d6b681acf08cc0b52425479f1f

  • SHA1

    e86d4430615522b6e34ec26c406ade6c278295b1

  • SHA256

    6f6fcfcf9bd7990889c0cc6ccb6daa3511059810d8047a52d12e0946f5d973e0

  • SHA512

    c763547adcc825b7a5ed5c2ca99b6a8898e32fb6051b8358f957659af184ca4a1aa4db700c5b4110103591519380813cbd4dd1bb43781eae0489e80ada2f2ad6

  • SSDEEP

    196608:n/K4vs9RytHdqYAUoj922ZjShQBKw2lNW8H2M:n/bEOpdIUooOwWHM

Malware Config

Targets

    • Target

      Grabber_3.2.0.exe

    • Size

      7.6MB

    • MD5

      cabcf8d6b681acf08cc0b52425479f1f

    • SHA1

      e86d4430615522b6e34ec26c406ade6c278295b1

    • SHA256

      6f6fcfcf9bd7990889c0cc6ccb6daa3511059810d8047a52d12e0946f5d973e0

    • SHA512

      c763547adcc825b7a5ed5c2ca99b6a8898e32fb6051b8358f957659af184ca4a1aa4db700c5b4110103591519380813cbd4dd1bb43781eae0489e80ada2f2ad6

    • SSDEEP

      196608:n/K4vs9RytHdqYAUoj922ZjShQBKw2lNW8H2M:n/bEOpdIUooOwWHM

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks