General
- Target roar.exe
- Size 70.4MB
- Sample260620-vbgqzahs9t
- SHA256 7a1d3e465df4502c215fabb77df2f974ea91beef9f7f75e8fdb3cf8cd71fb755
- MD5 452c77254650061e9dcf0dfeb96769c9
- SHA1 90c17e951048c16dd6394fc6d297c001fe4f3b45
- SHA512 e7c0a2761d65e666b26a67fba7e1aff36270d6e804435d42dfad1a4377f67c0df1417f3766912f466c2c3f92bddc6d63eb6d17b0203765681357f67097d29d10
- SSDEEP 1572864:0wFQ/a54js5ydGE9SB7n7U02a+vZ8xtWQH05R9oynl7Qfw/9:hfG6yTuFn+G/e5RJnl7Q4/
- TLSH T15EF7335361BA4AFFE674A572C5210A7B11C52CC89B70B26B1AF130CD6BF25F30E1A536
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
roar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
roar.exe
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target roar.exe
- Size 70.4MB
- SHA256 7a1d3e465df4502c215fabb77df2f974ea91beef9f7f75e8fdb3cf8cd71fb755
- MD5 452c77254650061e9dcf0dfeb96769c9
- SHA1 90c17e951048c16dd6394fc6d297c001fe4f3b45
- SHA512 e7c0a2761d65e666b26a67fba7e1aff36270d6e804435d42dfad1a4377f67c0df1417f3766912f466c2c3f92bddc6d63eb6d17b0203765681357f67097d29d10
- SSDEEP 1572864:0wFQ/a54js5ydGE9SB7n7U02a+vZ8xtWQH05R9oynl7Qfw/9:hfG6yTuFn+G/e5RJnl7Q4/
- TLSH T15EF7335361BA4AFFE674A572C5210A7B11C52CC89B70B26B1AF130CD6BF25F30E1A536
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Loads dropped DLL