Extracted

• • Target

    AK-grabber-main.zip

  • Size

    8.3MB

  • MD5

    7e45e3678356dca0f9d80af8bce0454d

  • SHA1

    605f9530a12e8e5ac037d0e03b9b57bcda725176

  • SHA256

    61a6e4dbd178f255925e5155f25e3677dab20b5a25b56de0c46ee94000fe7af1

  • SHA512

    d81cb338e4acff77501f03f981aba117fd5a4098a0ba38ff2f1659826633570c6dcd7be25c974e32f1495f07798623e3c2e9a3b785152d5e8c3955d06f400b49

  • SSDEEP

    196608:E/Om5Zf3JVjtSbR85RkX+QnGgn4V2xzB0HlWc7M7:rSZf3nhS98nCNsV2Ukc7M7

  Score

  1^/10
  behavioral1behavioral2

• • Target

    AK-grabber-main/A5 Grabber/Builder.bat

  • Size

    1KB

  • MD5

    5979754ace78a195d8a422ee0fca7f05

  • SHA1

    9e9c09b8339fb947ceb636530c026ac6e33c64c4

  • SHA256

    3d5c3a224cd42dc961f0a08e3faaf09617849874b5544333c8060ff76f0a6fb7

  • SHA512

    2fdb0e9d86e12b14b6d746287bc413100a6fe2f6d696e15dff6d690e5cf8865c3dd592f6d96a98cb9c4fce0d85deeba16cfd634b4bcbeced16273c404de7ae44

  Score

  1^/10
  behavioral3behavioral4

• • Target

    AK-grabber-main/A5 Grabber/Components/BlankOBF.py

  • Size

    5KB

  • MD5

    b3d2f59792b99d98107717d6b7100cf3

  • SHA1

    5cf1f176236fb12fd665301a64be7d883ca125c8

  • SHA256

    73bd45bbbf96aa84a2abf5eef93513126bd3adbbbb5ebd5272776643d99c1fb8

  • SHA512

    1791b325ea86c56d35ff9c9216685dd7b3d0b0d01538de5cb6310cb64750daadbeccddbe51fc985bb22a8d8e67ab1a180708e7b97441e0daa2c0b1c14e918ed8

  • SSDEEP

    96:Fr54cd62hK9FFZ48PuCQYBX5oQL6oUMOQcL:FP6Us4B8JoQLBsQcL

  Score

  3^/10

  discovery
  behavioral5behavioral6

• • Target

    AK-grabber-main/A5 Grabber/Components/cert

  • Size

    9KB

  • MD5

    b769e370f66299bca7f86932bc24925f

  • SHA1

    b4d882856a109412ed64c2449f51eab4697c844f

  • SHA256

    090b03e1ff82d53fb90c3776be756465d6bc4dc04b164348eeab703a72bb2243

  • SHA512

    a8e6b45c9623739b170aff0ae9109ceaa02ae1f1cd2a5f2ceca78c9b3446de010cea66afe2128795f441c91105fba5eaf4ba91991847f3874564d020a087ddeb

  • SSDEEP

    192:QpPIKfhig1R7JNfVZCg2tDKZpZfH0JOqsmVgz28WhBqA/v:QpwK3PVZAD28JN77hhd3

  Score

  1^/10
  behavioral7behavioral8

• • Target

    AK-grabber-main/A5 Grabber/Components/config.json

  • Size

    976B

  • MD5

    17c98daace9d0baf81f6b9856c719c36

  • SHA1

    8797f3c08ee01ebd3156d273a751a32cd8149afb

  • SHA256

    28eb749c0057fa28835c64032e1bee33f42494168dc4d21f93383020eccc5a82

  • SHA512

    17dd9ec30682b7dbed78de8fc09e9be578ccf39d2613e8752eb82a7bf2af3b3600c94ea89114eb94473b009628ed138ecaee2ad053119e4c493492d2321290c9

  Score

  3^/10

  discovery
  behavioral10behavioral9

• • Target

    AK-grabber-main/A5 Grabber/Components/loader.py

  • Size

    634B

  • MD5

    ca35548638710a32f6d4bc1a61a103c5

  • SHA1

    2703967c4376cc2e0ca20191eff97b85989d8310

  • SHA256

    e7dbfe873c719006f28e6526ef54215d7b7598bce5566734c552dab9f1f487e6

  • SHA512

    d1c0839326662b240dfa4bcea7284d261be46e9bb8b03f073e0328e361321f9cdfa740abd4541b2cdc21c806bcd901d3bc3cc36b9f7e0ee6191d189df0533061

  Score

  3^/10

  discovery
  behavioral11behavioral12

• • Target

    AK-grabber-main/A5 Grabber/Components/postprocess.py

  • Size

    2KB

  • MD5

    bbed9f3d87c4927b2b2bc16a6ec4da51

  • SHA1

    c3bceb8a6fb5207abc75039e5a66afbf8324cd8f

  • SHA256

    72eefc2defd861c48721f235717a0f8de430ea8f2bc290b429cfbdc906ba539c

  • SHA512

    352cd87d379e0a338d44f3933b6b135a36ebe83607157dfe28330ec2c03c6b2bcbbb2d43b1a06487675eea662c76084b3f9777f5b8d0c9132d50869318fc3c78

  Score

  3^/10

  discovery
  behavioral13behavioral14

• • Target

    AK-grabber-main/A5 Grabber/Components/process.py

  • Size

    8KB

  • MD5

    8cc1b499d73f3fc2140a5b0c97afd6f2

  • SHA1

    4e60e01f11ff8fec425c74679146e13713b18931

  • SHA256

    72f2b7cbcc38b79ce96d12e6fdd9a45874728a1abd49eed00438069ba8006f21

  • SHA512

    ac86a61d68bdac9b019d3c8a3f6102378b3e4f23be8398e6f0d79586dd29c0d104dc66e0cba267f88fb1b1d5241b74f51c073f2395f44d8f4ca34975b7534903

  • SSDEEP

    192:Eew1auOoI8I+IQI2Iz2Iym+IyIQICI0IiIgIcI6ISI+ISIKG2I0U0F+05dkIMN06:f4iE9pV3522EQTq1o4mE

  Score

  3^/10

  discovery
  behavioral15behavioral16

• • Target

    AK-grabber-main/A5 Grabber/Components/rar.exe

  • Size

    615KB

  • MD5

    9c223575ae5b9544bc3d69ac6364f75e

  • SHA1

    8a1cb5ee02c742e937febc57609ac312247ba386

  • SHA256

    90341ac8dcc9ec5f9efe89945a381eb701fe15c3196f594d9d9f0f67b4fc2213

  • SHA512

    57663e2c07b56024aaae07515ee3a56b2f5068ebb2f2dc42be95d1224376c2458da21c965aab6ae54de780cb874c2fc9de83d9089abf4536de0f50faca582d09

  • SSDEEP

    12288:3lPCcFDlj+gV4zOifKlOWVNcjfQww0S5JPgdbBC9qxbYG9Y:3lPCcvj+YYrfSOWVNcj1JS5JPgdbBCZd

  Score

  3^/10
  behavioral17behavioral18

• • Target

    AK-grabber-main/A5 Grabber/Components/rarreg.key

  • Size

    456B

  • MD5

    4531984cad7dacf24c086830068c4abe

  • SHA1

    fa7c8c46677af01a83cf652ef30ba39b2aae14c3

  • SHA256

    58209c8ab4191e834ffe2ecd003fd7a830d3650f0fd1355a74eb8a47c61d4211

  • SHA512

    00056f471945d838ef2ce56d51c32967879fe54fcbf93a237ed85a98e27c5c8d2a39bc815b41c15caace2071edd0239d775a31d1794dc4dba49e7ecff1555122

  Score

  3^/10

  discovery
  behavioral19behavioral20

• • Target

    AK-grabber-main/A5 Grabber/Components/requirements.txt

  • Size

    40B

  • MD5

    0717875d7e142fac144ac1e71d4ac6a0

  • SHA1

    a2b84254a7234831d5b50b5542d7c0e440b654af

  • SHA256

    c835fa03bbf8b1fea4dfea6001146028562a6716f42e3a8aa33e5a22d130350d

  • SHA512

    6c976e3f4a047895173b4165ca88449536abcc6b95e4889b528290420340500e8f4d1f0cee38ec65ec1e2a8d93e8fdbe88981c077b5357c6bd0e91da8b3c1677

  Score

  1^/10
  behavioral21behavioral22

• • Target

    AK-grabber-main/A5 Grabber/Components/run.bat

  • Size

    1KB

  • MD5

    5beaf38a2e57c2813f6b19b3fb08aca3

  • SHA1

    424b0ae28d3ea1e067e8c29d45f1f84040eaa7ec

  • SHA256

    ceade703cb46e78226dc0331ea37f3ed9f681b5969b56ddd15ca5a39e8c067d3

  • SHA512

    7265b1a73f2d4841b62aec2f1eeb14114051f5b09fa47049ebb0a39ae220bdf35e747c98467aa56be8fc90aa7102888ce215edc88a52212b26ee915fdbe2d486

  Score

  1^/10
  behavioral23behavioral24

• • Target

    AK-grabber-main/A5 Grabber/Components/setup.exe

  • Size

    7.4MB

  • MD5

    5151030ea432527a9b66e6dae0b87e14

  • SHA1

    1423cdab433ed75bfd49b76d2039dd93c90f2621

  • SHA256

    12c2ae9e20fe738c0bce880495a8739e0937446c26571e49d653fd24c69b6163

  • SHA512

    2702f06de201f2acfca05143715775ec8c9c7592bb8ed84826e56c9b29c8db29efdc94e03b8a929e945789c728b8beb17b9ade7d709f4402356d9ffca97dd086

  • SSDEEP

    196608:oj0cD/z3DLjv+bhqNVoBKUh8mz4Iv9PaHt4Ihy:hi/z3XL+9qz8/b4IYGIhy

  Score

  8^/10

  upxcollectioncredential_accessdefense_evasiondiscoveryexecutionpersistenceprivilege_escalationspywarestealer

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Clipboard Data

    Adversaries may collect data stored in the clipboard from users copying information within or between applications.

    collection

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Obfuscated Files or Information: Command Obfuscation

    Adversaries may obfuscate content during command execution to impede detection.

    defense_evasion

  • Enumerates processes with tasklist

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral25behavioral26

• • Target

    ��d�*.pyc

  • Size

    1KB

  • MD5

    1007583a804c465604e5617c94380a63

  • SHA1

    bef0f0095eaac51bef6a21299a346413f6ff7db9

  • SHA256

    51c583360a0341fd30eaa92ced30589e1bd63e91644e7aa4f0a51735c15fb922

  • SHA512

    70e843b61d7a5598c6bf02775db4b5ad8d9c7a68d5078bd7d62b4dc48f020ef378b78597438cee89faf3a8314dcf91384e8e5136893ee4656577ad15b1e27581

  Score

  1^/10
  behavioral27behavioral28

• • Target

    AK-grabber-main/A5 Grabber/Components/sigthief.py

  • Size

    10KB

  • MD5

    57156b83bcfa0c8cbc0fc36aa02a1617

  • SHA1

    a6aaf0f1e05924e6c6a27918f406c620cacf7a01

  • SHA256

    caf899aedb2b0fe154de2223d86604380d2cf4a47406f881cca680c8a4b063bf

  • SHA512

    63b8944298cdc7323ee7b193efa75018a759d10c6933d430ad62779231b9daca6b2dfd0fcac8e69b5846474b83c1deae5b82606d88c26bebad5bb31d50ff883e

  • SSDEEP

    192:J/j5U9+6E0yWYSF/DwI6CRH2dCYwqSfU15dkAJH:J6yMSfUU1l

  Score

  1^/10
  behavioral29behavioral30behavioral31behavioral32