General
- Target roar.exe
- Size 70.3MB
- Sample260620-vgwgbaf13m
- SHA256 e3d3bc3b123ddfa3eddec4199b4227bfa5f7ef02daaf6e591b4431a3a565e1fe
- MD5 49373de006fb78997d5e5988fe89334e
- SHA1 96e76ae045cff9d7ba689dd0bc9e423b70aaf91c
- SHA512 578393fa0d0fd2974d1c9d94a76b80854ed2b04ffc29b58dfbbc894fd21366aebc4ef4acd802028d94bae9dbe92bc9d94b41d63d031eaa1f0ec82d47170fc2e9
- SSDEEP 1572864:lYNKUVi/9ZxC3e0asOFAuze09HynCO/nk5u:lWRVhvasOFAQXH6COOu
- TLSH T141F73311237E0FABD6638472C55E49C6F5CE38685760040BEB787ADE2B7EBD05D36882
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
roar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
roar.exe
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target roar.exe
- Size 70.3MB
- SHA256 e3d3bc3b123ddfa3eddec4199b4227bfa5f7ef02daaf6e591b4431a3a565e1fe
- MD5 49373de006fb78997d5e5988fe89334e
- SHA1 96e76ae045cff9d7ba689dd0bc9e423b70aaf91c
- SHA512 578393fa0d0fd2974d1c9d94a76b80854ed2b04ffc29b58dfbbc894fd21366aebc4ef4acd802028d94bae9dbe92bc9d94b41d63d031eaa1f0ec82d47170fc2e9
- SSDEEP 1572864:lYNKUVi/9ZxC3e0asOFAuze09HynCO/nk5u:lWRVhvasOFAQXH6COOu
- TLSH T141F73311237E0FABD6638472C55E49C6F5CE38685760040BEB787ADE2B7EBD05D36882
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
A stealer written in Python and packaged with Pyinstaller
-
Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
-
Loads dropped DLL